Some users in a LDAP group fail to synchronize in Spotfire although other users in the same group are

Product:TIBCO Spotfire Server
Versions:All

Summary:
This article talks about an issue where a few users in LDAP groups fail to synchronize to the Spotfire User Directory although there are other users in the same security groups in LDAP that are synchronized in Spotfire

Details:
There can be an issue where in a few users in Active Directory group(s) fail to synchronize to the Spotfire User Directory although there are other users in the same security groups in Active Directory that are synchronized in Spotfire.

Note: You should verify that :
         - user(s) is not disabled on Active Directory and
         - user(s) are a part of the same Active Directory security group and
         -  it supports all attributes in the Spotfire configuration (under the user search filter & group search filter)

Resolution:
If all possible reasons specified in the Note section above do not explain why the Active Directory users are not synchronized in Spotfire, then the issue may be with the following security setting:

As shown in the screenshot below of the user Properties dialog, make sure that the user(s) who is not being synchronized has the "Read" permission selected for "Authenticated Users"


Note: If you want to start a user synchronization after making some changes, please refer to Knowledge base article Manually starting an LDAP user and group synchronization from the command line in TIBCO Spotfire Server