Support the definition of arbitrary LDAP filters, where users matched are deemed to be part of a group.
An example requirement, from Brown University in the USA:
1. Dynamic Groups requirements from Brown University are pretty simple:
We'll need the ability to define a dynamic group based on more or less arbitrary ldap query patterns on people objects in the People OU. A couple examples:
So a very broad filter set that allows admins in Crowd to define a group based on an ldap filter starting at a particular ou would be useful.