There is a requirement to create a Dynamic Group membership rule based on parts of a user's DN.
This is not possible at the moment due to a limitation on the AD side by Microsoft.
WORKAROUND
None
STATUS
Enhancement Request 711078 has been raised to include this feature in a future release.
© 2026 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center