LDAP filter expressions
IBM Verify Identity Governance provides a built-in interpreter for general RFC 2254 LDAP filters and for two custom extensions to the filter syntax defined by the RFC.
The first extension provides a notation for variables in LDAP filters that reference IBM Verify Identity Governance relationships. These variables resolve to related or connected objects. The second extension provides a notation for variables in LDAP filters. These filters reference a system object and a date keyword that resolve to the current date and time. The two extensions to the LDAP filter syntax are interpreted and evaluated at run time and are known as filter expressions. The filter expressions enable administrators to define filters with dynamic parts that reference useful abstractions in IBM Verify Identity Governance. The two types of filter expressions that are supported are relationship expressions and system expressions.