Skip to main content
Solved

memberOf and transitiveMemberOf are not working for us

  • June 2, 2025
  • 3 replies
  • 1 view
M
Forum|alt.badge.img+17

I literally jumped out of my chair when I realized that this ages-old issue is going to be working now ;)

I played around with this enhancement and it's not working for us unfortunately. These are the combinations that I tested:

 

These combinations are only returning one value instead of ~120 for my user:

transitiveMemberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" disabled

transitiveMemberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" enabled

memberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" disabled

memberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" enabled

 

These combinations are returning nothing (as expected, this was just tested to make sure I'm not missing something)

transitiveMemberOf as LDAP mapping, "Allow Attribute Multiple Values" disabled

transitiveMemberOf as LDAP mapping, "Allow Attribute Multiple Values" enabled

memberOf as LDAP mapping, "Allow Attribute Multiple Values" disabled

memberOf as LDAP mapping, "Allow Attribute Multiple Values" enabled

 

What am I missing here? 

Best answer by lukasz_slodziak

Awesome news! Thanks for testing the feature out. No need to send the additional details, we know our culprit now. We will definitely add the information about it to the release notes and will look into prioritizing a fix. Thank you again!

      3 replies

      lukasz_slodziak
      Forum|alt.badge.img+9

      Hey @m_entholzner, thank you for trying memberOf out! I think we will need a bit more data in order to diagnose the issue here. Would you mind collecting the following and sending it over to beta@jamf.com citing my name?

      • your instance name
      • Jamf Pro logs after the data has been pulled for the Extension Attribute you have been testing
      • screenshots of your:
        • Entra ID configuration screen
        • Extension Attribute configuration screen
        • a screenshot where you're seeing the value displayed incorrectly

      The team is also considering whether you ran into a separate PI, multi-value Extension Attributes are only showing the first value from the list on the General tab of a Computer Inventory view. Switching to Extension Attributes, shows the full list. If this is the case it's only a UI display issue and the value should be pulled correctly.

      Thank you!

      M
      Forum|alt.badge.img+17
      • m_entholzner
      • Author
      • Honored Contributor
      • June 2, 2025

      @lukasz_slodziak , thanks for your quick reply and also the hint with the PI.

      After changing the display from General to User & Location, the full group list was instantly propagated with transitiveMemberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" enabled. 

      So at least from our end, all good now 😊

      I don't know if it's still relevant to submit the information? If you still want / need it, please let me know. Also, maybe this PI is worth to be mentioned in the final release notes of 11.18? Or even better, fix the PI for 11.18 😁 

      I cannot tell you how big the impact of this little new feature is - this eliminates tons of scoping issues on our end. Thumbs up for your devs! 😎 

      lukasz_slodziak
      Forum|alt.badge.img+9

      Awesome news! Thanks for testing the feature out. No need to send the additional details, we know our culprit now. We will definitely add the information about it to the release notes and will look into prioritizing a fix. Thank you again!

        Terms & ConditionsAccessibility statement