{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41627,"path":"platform-security/ldap-integration/r_LDAPExtraction.md","title":"LDAP extraction","bundle":null,"doc_type":null,"release":"australia","body":"\n# LDAP extraction\n\nImplement an LDAP extraction process to detect inactive users.\n\nTo detect inactive users using LDAP extraction, create a separate LDAP data source scoped specifically to inactive user accounts. For example, target a inactive users organizational unit \\(OU\\) or apply a query filter that matches inactive account flags. In the Table Transform Map for that data source, add a transform script that sets `target.active = false` for each record. Because the data source returns only inactive users, the script deactivates only those accounts in ServiceNow.\n\n## Benefits\n\nBenefits to this method include:\n\n-   Simple scripting\n-   Existing user records aren't involved in processing\n-   Inactive users aren't loaded into a temporary import table\n-   No performance impact\n\n## Drawbacks\n\nDrawbacks to this method include:\n\n-   An additional process is created\n-   The extract set must be placed in a location where your data source can access it\n\n## Alternative method\n\n[LDAP refresh filters](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/ldap-integration/r_LDAPRefreshFilters.md) use multiple import jobs to divide different types of user records, segregating records for separate processing.\n\n"}}