Account Settings

On the Configuration > Settings > Account tab, specify the search scope that will be managed by the configured application.

1. Configure the Search Scope within the LDAP directory as follows:

   • Subtree: to search the specified Search DN and all containers within it.

   • Base: to search only the Search DN.

   • One Level: to search the Search DN and the containers one level below it.

2. In the Search DN field, enter the distinguished name of the container. For example:

   ou=people,dc=example,dc=com

3. Enter an optional Iterate Search Filter when you are iterating over account objects. This filter is applied while fetching groups from the Search DN.

4. The Group Member Search DN field represents a multivalued attribute to define the scope for group memberships.

5. The Group Member Search Filter is an optional filter in LDAP that limits the results returned by the Search DN.

   For example, the following filter returns all entries that do not represent a person:

   (! (objectclass=person))

6. The Filter String field is an optional filter applied to the results returned by the application. Derived attributes can be included in the filter.

   For example, the following filter string removes users if there is an attribute named deleted and the value is true:

   deleted == "true"

7. Select Save.