Automatically limit LDAP I being synchronized to only those members that are included in the LDAP GROUPS being synchronized.

LDAP enhancement requests to help with syncing of I into the Spotfire environment:

For us, the Spotfire LDAP sync of I is very inefficient and could be greatly improved with a couple of enhancements. Spotfire reads through and syncs the entire LDAP directory tree of ~800,000 I. The LDAP tree is very flat at. There are only a couple hundred Spotfire groups and I within those groups that need access to Spotfire.

Unfortunately, the Spotfire Server syncs the groups marked for group synchronization and then separately queries I based on the context-names and user search filter. It would be very useful to be able to limit the LDAP I synced to Spotfire to I that are in the synchronized groups. This would allow Spotfire greater flexibility in organizations where the LDAP tree is very flat and I are organized by Spotfire groups, but not much else.

The enhancement request here is to allow one the option of choosing that only I in the synchronized groups should be synced into Spotfire. In this case, Spotfire would query the groups, query I within the groups and then use those I as I to sync into Spotfire.