Summary:

When setting LDAP integration, it's possible to enable nested groups. It's also possible to write User Object Filters to restrict the synchronization scope.

Current behavior:

When setting an User Object Filters as the following example:

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=jira-users,OU=jira,DC=company,DC=local))

Only the direct members of jira-users group are pulled in after the synchronization, members of nested groups that are associated to the parent group are not picked up during the synchronization.

Expected behavior:

JIRA should be able add nested members during the synchronization.