Specify the search string that defines the first letters of the Active Directory user name.

Specify the domain or OU to limit the search scope.

Specify the search scope:

• Base
• One level
• Sub tree

Query criteria are sent to the target platform with other query parameters to reduce the number of returned objects and may improve query performance.

Set the filtering conditions to only return objects or data that need to be processed by the rule.

It is possible to use only one of these filters: either the LDAP filter or the filter, where you can select properties and operators from the list.

Specify how to map cloud users:

1. By msDS-ExternalDirectoryObjectIDattribute (default value)
2. By anchor attribute and UserPrincipalNameattribute

Always useDefault Credentials for Current Scope (default value).

Other values are not applicable for Dynamic Groups.

Default Credentials for Current Scope (default value) - credentials of corresponding domain controller specified in Managed domains table in Active Directory extension settings.

Always use Default Domain Controller for Current Scope (default value).

Other values are not applicable for Dynamic Groups.

Default Domain Controller for Current Scope (default value) - a proper domain controller is automatically identified from the Managed domains table in Active Directory extension settings. Cayosoft Administrator uses the Distinguished Name of the scope Organizational Unit to find a proper domain in the Managed domains table, then this domain DC is used to execute the web query.

Specify the number of objects to include in one page for an AD DS query.