[sync]
  version = "aa04185"
  enabled = true
  server = "10.1.20.10"
  port = 389
  use-ssl = false
  root-ca-cert = ""
  ssl-skip-verify = true
  basedn = "dc=knowbe4,dc=com"
  filter = "(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))"
  filter_users_by_ou = "(&(objectCategory=person)(objectClass=user)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!cn=HealthMailbox*)(!cn=SystemMailbox*))"
  filter_users_by_name = "(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!cn=HealthMailbox*)(!cn=SystemMailbox*)(|{DYNAMIC_CONTENT}))"
  filter_users_by_group = "(&(objectCategory=person)(objectClass=user)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!cn=HealthMailbox*)(!cn=SystemMailbox*)(|{DYNAMIC_CONTENT}))"
  filter_users_by_token = "(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!cn=HealthMailbox*)(!cn=SystemMailbox*)(primaryGroupID={DYNAMIC_CONTENT}))"
  [sync.fields]
    comment = ""
    custom-date-1 = ""
    custom-date-2 = ""
    custom-field-1 = ""
    custom-field-2 = ""
    custom-field-3 = ""
    custom-field-4 = ""
    department = "department"
    division = "division"
    employee-number = "employeeNumber"
    employee-start-date = "whenCreated"
    first-name = "givenName"
    last-name = "sn"
    location = "physicalDeliveryOfficeName"
    manager = "manager"
    mobile-number = ""
    organization = "o"
    phone-number = "telephoneNumber"
    title = "title"
  [sync.users]
    includedOUs = ["users/root"]
    excludedOUs = ["disabled/users/root"]
    includedGroups = ["Accounting","Finance"]
    excludedGroups = [""]
    includedUsers = [""]
    excludedUsers = [""]
  [sync.groups]
    includedOUs = ["sublevel/KnowBe4"]
    excludedOUs = [""]
    includedGroups = [""]
    excludedGroups = ["excludeme"]