Active Directory Configured as an Identity Source

When configuring Active Directory as an identity source, it is recommended to verify the default LDAP policy on the active directory server and check for MaxPageSize that limits the number of objects that the server will return. The default value is 1000.

Perform the following steps to verify the quotas on the Active Directory server:

  1. Open the ADSI Edit page.

  2. In the Configuration partition window, navigate to Services ==> Windows NT ==> Directory Service ==> Query Policies.

  3. In the left pane, click on the Query Policies container, then right-click on the Default Query Policy object in the right pane, and select Properties.

  4. Double-click on the lDAPAdminLimits attribute and select the MaxPageSize attribute.

  5. Click Remove and modify the value in the Value to add field to add the new value (for example, MaxPageSize=2000) and click Add.

  6. Click OK twice.

LDAP policy can also be modified using Ntdsutil.exe, follow instructions mentioned in https://support.microsoft.com/en-us/kb/315071 to view and set LDAP policy on Active Directory server.