You can use a group from your directory service (e.g. Active Directory) to provision users via LDAP in your COYO.
We’ll show you how that works in this article:
Create a group in your directory service and add all of the users who should COYO later on. As COYO can’t work with nested groups, the group should only have one level.
In this example, we call the group "COYO Group" and create it in the OU "Groups" in our user directory.
Create a user directory in COYO according to our instructions. It must be possible to find all of the members of the created group in the scope of the configuration.
Define an LDAP filter syntax and paste this into "Filter of the user object" on the "Users" tab.
With a simple architecture, the filter would look as follows:
One benefit of this configuration is that users who leave the group are treated as "orphaned users" in COYO. On the "Synchronize" tab, you define whether these users should be deactivated, deleted or ignored.
If a user is no longer able to log in following user synchronization, this article might help.