AD Connector - LDAP Search Filter on OU

[bastienprulhiere]

Hello

We are looking to adapt our Active Directory connector to read the generic and service accounts which are located into OU named Generics or Services.

As we have at least 50 different DNs per population, we prefer to avoir having 100 Search DN with the same filter and are looking to find another solution.

According to MS documentation, wildcard can’t be used on filter with attribute in DN format.

We tried different things but didn’t find the correct way to do it.

Does someone know how to build a such filter ?

Thanks

[mcheek (Mark Cheek)]

you can just put the OU in the Search DN field

[bastienprulhiere]

Hi @mcheek,

As explained, we have at least 100 DN which contains Services or Generics so we prefer to not use this.

Regards

[jesvin90 (Jesvin Joseph)]

Hi @bastienprulhiere,

Have you considered using the account filters in the ISC source.?

IdentityNow Account Filtering during Account Aggregation

You can add the required filter as per the documentation to bring in only the accounts from required OU’s.If you have pattern to identify the service accounts with their name or the OU, the filter can be made use of.

Please note that the accounts satisfying the filter criteria will be filtered out after the aggregation. You can wrap the query around a NOT operator to reverse the filter condition.