Currently you can import all or nothing. We have 2 reasons for wanting this feature.

1. We have a 500 user licence for Crowd as we do not need more than 500 users to use the applications connected to crowd. However there are more than 1000 users in our active directory LDAP server.

2. Our LDAP server contains lots accounts that are not real user accounts for people. i.e admin accounts for other systems etc. There is roughly 1000 real user accounts and 300-400 other accounts we would never want to import.

Additionally the ability to provide a filter to the import for users not to import would be useful to filter out accounts we don't want to import.

Until there is an option to only import a subset of the external directory instead of all users we cannot feasibly use Crowd to secure our applications in combination with Active Directory.