Only allow specified groups for Active Directory

[Nebeyu Daniel]

Currently my team is able to configure LDAP user directory but is unable to filter for a few groups. Below is the user schema settings and group schema settings:

User Schema

• User Object Class: user
• User Object Filter: (&(objectCategory=Person)(sAMAccountName=*))
• User Name Attribute: sAMAccountName
• User Name RDN Attribute: cn
• User First Name Attribute: givenName
• User Last Name Attribute: sn
• User Display Name Attribute: displayName
• User Email Attribute: mail
• User Password Attribute: unicodePwd
• User Unique ID Attribute: objectGUID

Group Schema

• Group Object Class: group
• Group Object Filter: (objectCategory=Group)
• Group Name Attribute: cn
• Group Description Attribute: description

Please let me know how/which settings I should update to enable only a few groups to show from Active Directory.

[Monique Khairuliana[ServiceRocket]]

Utilize LDAP filters in the Group Object Filter field. For example, if you want Confluence to only synchronize confluence-users and confluence-administrators group from LDAP, add this filter in that field:

(&(objectCategory=Group)(|(cn=confluence-users)(cn=confluence-administrators)))

More examples here:

• How to write LDAP search filters

[Nebeyu Daniel]

Hi Monique thanks for the quick response. I added that filter but I after I clicked save and test I get the following error: