| http://www.w3.org/ns/prov#value | - If you were to handle multiple OUs with this matching rule, you would probably need to add a condition like the ?if source DN? in the first rule to the Condition Group to test where the users is in AD. You would need to copy this resulting rule to handle a second OU, and so on.
|