Query AD flow action filter question

[Ziad Qadora]

Hello,

I have a requirement to populate LDAP users and groups into ServiceNow from LDAP.   The environment uses CyberArk, so we are using a flow to connect to the LDAP and retrieve the users and groups.  

I'm trying to retrieve users using the Microsoft AD Spoke "AD Query" Action, and trying to limit the query to users in the Users OU, the query I'm using is similar "ou:dn:=XXX Users" .  

When using the query in the "AD Query"  flow action, no users results were returned.  Please see screenshots below

But when trying the same query using the LDAP Server Browse, It does return the users under the Users OU.  Please see the screenshot below.

The question is, what is the correct syntax for the filter "ou:dn:=XXX Users" when using the "AD Query" flow action.  

Regards,

Ziad

[Ziad Qadora · Accepted solution]

What we ended up doing is add logic in the flow to exclude users in the un-wanted sub OUs.