QUESTION
What is the process flow to bring back LDAP group information after configuring the option to Synchronize user/group information with LDAP during Windows authentication?
ANSWER
When logging in with Windows authentication after configuring the option to "Synchronize user/group information with LDAP during Windows authentication" the Intelligence Server will first issue a search request against the Active Directory based on the objectSID attribute of the user. Once a user in the Active Directory is found based on the objectSID, a second search request is issued by the Intelligence Server to bring back the group information for the user which is based on the Group search filter configured under LDAP - Filters. For example:
(&(objectclass=group) (member=#LDAP_DN#))
