LDAP: How to limit your LDAP sync to a Group of users only

Modified on Thu, 2 Nov, 2023 at 10:03 AM

If you would like to set up your tenant so that only members of a certain group are synced, use the below Search Filter. 


IMPORTANT: We recommend always testing the configuration in a separate application (such as Softerra LDAP Browser before committing the changes to your LDAP settings, to ensure only the users you want to import will be imported).




Search Filter:


(&(objectClass=user)(memberOf=cn=MyGroup,ou=MyOU,DC=ad,DC=mydomain,DC=com))



Note: For the above filter, replace anything after 'memberOf' with the DN of your group.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article