The
following user filter string seems to be working for us.
&(objectClass=user)(|(memberOf=CN=Spotfire-Admins,OU=Spotfire,OU=SecurityGrp,DC=h...b,DC=com)(memberOf=CN=Spotfire-Users,OU=Spotfire,OU=Security....Grp,DC=h...b,DC=com)(CN=Spot*))
CN=Spot* - will sync all the users who start with Spot
e.g Spotfire_test_user@test.com
