Group Admin and Group Member scope rules not returning results.

Products

• CA Identity Manager

Issue/Introduction

Unable to build a scoping rule to return Group Admin or Group Members 

Environment

Release : 14.4, 14.5

Component : IdentityMinder(Identity Manager)

Resolution

This is due to IDM conforming to the current LDAP standard, where those values are being stored in the Directory as DN type attributes, which do not allow for substring searches. 

An alternative option would be to store the searchable attribute as a string type attribute in the Directory.