When configuring an LDAP Directory Mapping, the configured source may be either an LDAP OU or an Active Directory Group (LDAP "CN").
The configuration for "LDAP Directory Mappings" is located on the '/tpam' interface under "Auto Discovery | LDAP Directory".
Configure the "Distinguished Name" of the OU or Group (either manually or via the "Directory Explorer" button). Using the "Validate DN" button will return the number of objects (Systems or Users) returned from the configured "Distinguished Name". This value can be used to confirm that the correct number of objects are being returned from that configured source.