Adding a option when using Crowd that only users and groups from a directory are show in the connected applications management interface that can authenticate. Any extraneous groups that are not authenticated would not show in the connected application leaving a cleaner interface without extra information from a unified directory.

Current behavior example: The Crowd connector to Confluence specifies under Directories and Group "Who Can Authenticate" only groups with the name Confluence in them. Confluence administrators looking at the member management in the Confluence administration can see Jira groups even though those groups are not allowed for authentication on the Crowd Confluence connector. Members of all groups show up in the user list with their respective group memberships. The application administrators have many extraneous users and groups they will not be using.

Desired behavior example: The administrator selects an additional option in the Crowd connector to only synchronize groups who can authenticate. The Confluence administration panel would show the groups who can authenticate and only users who are members (or nested members) of these groups.