Import and authenticate users from a particular group in Active Directory
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
legacy-article
learn-legacy-article-disclaimer-text
Issue
- Instead of importing and authenticating all users from Microsoft Active Directory (AD), I would like to only import and authenticate users from a particular group in AD.
Environment
Resolution
- In the Authentication Search Filter, specify the filter like this:
(&(objectCategory=person)(mail=@email_address@)(memberOf=cn=$Group_name,dc=mydomain,dc=com))
For multiple groups, the filter is like this:
(&(objectCategory=person)(|(memberOf=cn=$Group1_name,dc=mydomain,dc=com)(memberOf=cn=$Group2_name,dc=mydomain,dc=com)))
- In the Groups > Import Search Filter, specify the filter like this:
(&(objectClass=person)(memberOf=cn=$Group_name,dc=mydomain,dc=com))
For multiple groups, change the search filter like this:
(&(objectClass=person)(|(memberOf=cn=$Group1_name,dc=mydomain,dc=com)(memberOf=cn=$Group2_name,dc=mydomain,dc=com)))
did-this-article-resolve-your-issue