Hi all! I'm having somo difficulties to get users and groups associations in AD. I can authenticate, but everyone gets assigned to all groups mapped. I suspect of groupSearchFilter property in ldapAuthenticationProvider bean. For now the only value that ever worked is: <property name="groupSearchFilter" value="(objectClass=group)"/> Tried: (&((objectClass=group)(member:1.2.840.113556.1.4.1941:={0})(cn=*))) (&(uniqueMember={0})(objectclass=groupofuniquenames)) (&(objectclass=group)(member={0})(cn=*)) (&((objectClass=group)&(member:1.2.840.113556.1.4.1941:={0})(cn=*))) None of them worked. What should I put to get user memberships to roles?