Jamf LDAP can't find AD-derived groups in Okta via LDAP Interface

[abfajerman]

I have an Okta LDAP interface configured for LDAP queries; Active Directory is on the other end of Okta. I can query for users from Jamf via the LDAP connection but I can't find any groups that were created in Active Directory and then synced to Okta. I can find Okta groups just fine, though. I'm hoping it's an attribute issue of some kind.

[mhene82]

We've had the same issue. We have the need for limited groups in Jamf from AD. Therefore, I got around this by creating an Okta group named the same as AD. Then create a group rule in Okta that says if an Okta user is a member of AD group then add them to the Okta group. Very dumb... but it works.