I was told this would be a better place than github issues. We're moving from an ldap environment to an AD environment. This means we have a large amount of users who are still linked with their original ldap UIDs. Unfortunately, changing the UIDs to the automatically assigned AD UIDs is not an option. Is there a way for SSSD to both inherit a UID if it exists or create its own if it doesn't? Also, is it possible to sync AD groups as well? Right now we have this: #ldap_id_mapping = True ldap_user_uid_number = uidNumber ldap_user_gid_number = gidNumber Unfortunately, even removing the last line doesn't sync AD groups. Are there any options to sync them? Thanks, Kurt