Limit LDAP synchronization to a group

[Tommi Hovi]

I've tried to find an answer from documentation and from forums but didn't really find anything to help me out.

I have two Security Groups in AD for Jira, let's call them sg_jira_users and sg_jira_admins. Both of these groups reside in an OU called Security Groups. What I want to achieve is to synchronize these two groups only and the users within and not any other group or user.

Base DN: dc=company,dc=com

Additional Group DN: ou=Security Groups

What other filtering I need to do and should I use LDAP schema, User schema, Group schema and/or Membership schema for this?

Thanks in advance!

[JP _AC Bielefeld Leader_]

Hi,

you should check an approach by setting an additional user object filter like eg.

(&(sAMAccountType=805306368)(mail=*)(!(|(memberOf=sg_jira_users)(memberOf=sg_jira_admins))))

Without this filter all users will be synchronized, but only the groups below ou=Security Groups. Group & user sync are independent.

Best

JP