<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7UrVSAVOkta Classic EngineAdministrationAnswered2024-04-30T09:18:25.000Z2018-04-01T14:37:58.000Z2018-08-12T04:15:17.000Z

NiallM.01840 (Customer) asked a question.

Filter AD group import within OU
Is there a function to filter AD groups during import from an OU ? The OU structure contains a significant amount of groups that will never form policy or assignment or applications in Okta, so I'd like to reduce the number of groups imported. LDAP provides an LDAP filter but I can't see another way to restrict AD groups other than at the OU level. Am I missing something ?

  • emilian.aldea (Okta, Inc.)

    Hey @Niall,

     Emilian here with Okta's Customer Support Team.

     Indeed, as Jim Mollé had said, we do have the same functionality for AD embodied in the Group Object Filters. This is an EA feature, therefore if you'd like us to enable it you'll need to open up a support ticket and / or communicate it to your Account Executive.

     

    Best Regards,

     

    Emilian Aldea

    Technical Support Engineer

    Okta Global Customer Care
    Expand Post
    Selected as Best
  • Jimbo (Okta, Inc.)

    Hi Niall,

    In the AD Setting window, you can leverage the Group Filter option using the (objectCategory=group) field just below the tree structure option where you choose the OUs from which you want to import groups.
  • j5v7c (j5v7c)

    Hello,

     

    Thanks for posting your inquiry in Okta Community Portal.

     

    If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer." 

     

    Thank you,

     

    Dylann Fezeu

    Okta Help Center Team
    Expand Post
  • emilian.aldea (Okta, Inc.)

    Hey @Niall,

     Emilian here with Okta's Customer Support Team.

     Indeed, as Jim Mollé had said, we do have the same functionality for AD embodied in the Group Object Filters. This is an EA feature, therefore if you'd like us to enable it you'll need to open up a support ticket and / or communicate it to your Account Executive.

     

    Best Regards,

     

    Emilian Aldea

    Technical Support Engineer

    Okta Global Customer Care
    Expand Post
    Selected as Best
This question is closed.
Loading
Filter AD group import within OU