Account Settings

On the Account and Group Settings page, specify the search scope that will be managed by the configured source.

  1. Configure the Search Scope within the LDAP directory as follows:

    • Subtree: to search the specified Search DN and all containers within it.

    • Base: to search only the Search DN.

    • One Level: to search the Search DN and the containers one level below it.

  2. In the Search DN field, enter the distinguished name of the container. For example:

    ou=people,dc=example,dc=com

  3. The Group Member Search DN field represents a multivalued attribute to define the scope for group memberships.

  4. TheLDAP Search Filter is an optional filter in LDAP that limits the results returned by the Search DN.

    For example, the following filter returns all entries that do not represent a person:

    (! (objectclass=person))

  5. The Additional Filter field is an optional filter applied to the results returned by the source. Derived attributes can be included in the filter.

    For example, the following filter string removes users if there is an attribute named deleted and the value is true:

    deleted == "true"

  6. Select Save.