LDAP - Not able to remove members from the groups.

[Vinay46]

Hi all,

I have been facing a issue with the LDAP configurations where there is a LDAP group with 10 members and in the Servicenow group there are 13 members(added 3 members manually). Whenever I run the LDAP Active Directory, I am not being able to remove the extra members from the ServiceNow groups.
That is if I remove the members from the LDAP Directory then those members are not getting removed from the ServiceNow Groups. How can we configure LDAP Directory such that whenever the LDAP is running, then the Service Now group members should be synced automatically and remove extra members, if any?

Any help would be appreciated.

[Ankur Bawiskar]

Hi Vinay,

I think this should work i.e. whenever new user/group is added in AD it comes to ServiceNow similarly whenever user is removed/made active false user in ServiceNow is made active false but not deleted.

check this:

https://community.servicenow.com/community?id=community_question&sys_id=85b907e5db5cdbc01dcaf3231f9619c9

Mark Correct if this solves your issue and also mark Helpful if you find my response worthy based on the impact.
Thanks
Ankur

[Vinay46]

Hi Ankur,

Thanks for the reply. My problem is regarding the group members in the group. If I manually add members into SN Groups and if the LDAP Active directory is running then any missing members will be added to SN Groups. But, the group members added manually are not getting removed from the group. Our motive is to sync the ServiceNow groups after the LDAP AD runs.

Please let me know if you need any additional details.

Thanks,

Vinay

[Ankur Bawiskar]

Hi Vinay,

Not done much part into this so you need to explore. But what I think is since the group members were added manually they won't be removed when AD transform map runs.

Regards

Ankur