Do ADSI connector supports advanceGroupFilter functionality?

[GauravJain]

Hi

Do ADSI connector supports advanceGroupFilter functionality?

We wanted to import groups from a specific OU across various AD domains.

Please let me know if you require any further information.

Regards

Gaurav

[rushikeshvartak]

Its not supported but can you validate same syntax and give try

[GauravJain]

Hi @rushikeshvartak @stalluri its not supported, tried 2 rounds of testing with following configuration in place

1. with "advanceGroupFilter" and groupSearchBaseDN config

2. removed groupSearchBaseDN config but kept "advanceGroupFilter" config

now, my next question is - is it possible to include OU level information in "groupSearchBaseDN" config to pull only specific groups? For example 

groupSearchBaseDN = "OU=ABC,OU=DEF,OU=HIJ,DC=SAVIYNTLABS,DC=ORG"

OR groupSearchBaseDN only accepts BaseDN's like this "DC=SAVIYNTLABS,DC=ORG"?

Regards

Gaurav

[Amit_Malik]

@GauravJain , what you trying to achieve is not directly supported. You can raise an Idea.

Also see this ideas - https://ideas.saviynt.com/ideas/EIC-I-5203

[rushikeshvartak]

@GauravJain  To keep client setup clean and healthy and easy for maintenance avoid complex implementations which can cause future issue 

[stalluri]

@GauravJain 

It is not supported.

[GauravJain · Accepted solution]

i have confirmed by performing multiple rounds of testing that ADSI connector does not support "advanceGroupFilter" configuration.

[rushikeshvartak]

Please raise idea ticket and share here

[GauravJain]

Its already shared by @Amit_Malik above. I have upvoted it.