Only allow specified groups for Active Directory

Question

Currently my team is able to configure LDAP user directory but is unable to filter for a few groups. Below is the user schema settings and group schema settings:

User Schema

* User Object Class: user
* User Object Filter: (&(objectCategory=Person)(sAMAccountName=*))
* User Name Attribute: sAMAccountName
* User Name RDN Attribute: cn
* User First Name Attribute: givenName
* User Last Name Attribute: sn
* User Display Name Attribute: displayName
* User Email Attribute: mail
* User Password Attribute: unicodePwd
* User Unique ID Attribute: objectGUID

Group Schema

* Group Object Class: group
* Group Object Filter: (objectCategory=Group)
* Group Name Attribute: cn
* Group Description Attribute: description

Please let me know how/which settings I should update to enable only a few groups to show from Active Directory.

Nebeyu Daniel · Answer

Hi Monique thanks for the quick response. I added that filter but I after I clicked save and test I get the following error:

Monique Khairuliana[ServiceRocket] · Answer

Utilize LDAP filters in the Group Object Filter field. For example, if you want Confluence to only synchronize confluence-users and confluence-administrators group from LDAP, add this filter in that field:

(&(objectCategory=Group)(|(cn=confluence-users)(cn=confluence-administrators)))

More examples here:

* How to write LDAP search filters