vir8k (vir8k) asked a question.
I can accomplish this with memberOf but due to API constraints with Okta, this goes over our rate limit and is too slow for production use. I am trying to do this with uniqueMember as this supports indexing but I am having a real hard time getting this to query correctly.
Here is what I have and I believe the issue is how I am thinking of uniqueMember. I believe it is just an attribute for the groups but I don't know how to query a list of groups to get the uniqueMembers.
(&(objectClass=inetOrgPerson)(|(uniqueMember=CN=groupnamehere,ou=groups,dc=myorg,dc=okta,dc=com)
The memberof query that works but hits over the API limit and is slow.
(&(objectClass=inetOrgPerson)(|(memberOf=CN=group1,ou=groups,dc=myorg,dc=okta,dc=com)
Hi @vir8k (vir8k),
Thank you for posting on Okta community page!
I have done some research and played around with the LDAP queries in order to see if I could get a list of all uniquemembers of a group but I was only able to list the groups that the user is being part of. I ended up using the bellow query in which it required to add the full path:
Additionally through my research I could find that indeed the uniquemember is an LDAP group attribute for members in groupOfUniqueNames that uses the value of DistinguishedName.
I hope the above information was useful!