Showing user ldap

Starting from FortiOS 7.2.1, the group-filter setting has been replaced with two-factor-filter, as shown in the following example command:

FGVMULTM24003711 (root) # show user ldap
config user ldap
    edit "ad-136"
        set server "10.160.13.6"
        set cnid "sAMAccountName"
        set dn "DC=cloudsolutionsqa,DC=com"
        set type regular
        set two-factor fortitoken-cloud
        set two-factor-filter "(&(objectClass=user)(memberOf=Cn=FIC-ops,ou=QA,dc=cloudsolutionsqa,dc=com))"
        set username "ldapadmin"
        set password ENC 

    next
end

In this configuration, only users from group FIC-ops will be synched to FortiIdentity Cloud when running the execute fortitoken-cloud sync command. If the sync command is not run, only users from the configured group will be synched to FIC after the first login.