Hi Team,
We are planning to evaluate the feasibility of implementing a delta synchronization approach for Active Directory (AD) group imports into ServiceNow.
Currently, the Group OU Definition performs a full import using the LDAP filter:
(objectClass=group)
As a result, every scheduled synchronization queries and imports all groups from Active Directory, regardless of whether any changes have occurred since the previous run.
We would like to understand whether a delta synchronization approach can be implemented to import only newly created, modified, or deleted groups, thereby reducing the overall load and improving synchronization efficiency.
If anyone has previously implemented a similar solution or has experience with this approach, please share your insights on its feasibility, recommended design, and any potential challenges or limitations.
Thank you.
