Summary
I use SAML (ADFS) with LDAP enabled but when I configure the LDAP admin filter it seems to be ignored.
Steps to reproduce
Run mattermost server via docker following the guidance documentation and add enterprise license.
Enable SAML for ADFS following; Configure SAML with Microsoft ADFS using Microsoft Windows Server 2016 - Mattermost documentation and enable LDAP sync following; AD/LDAP setup - Mattermost documentation .
Set an admin filter (and enable) under LDAP setup of: (memberOf=cn=admingroup,ou=groups,DC=fabrikam,DC=local)
Add a mattermost user directly to the admin group in AD
Expected behavior
I expected the user would be promoted to admin at next logon via SAML (after AD sync) assuming existing session has expired (as per note on admin filter docs)
Observed behavior
The user is still just a normal user, there are no log entries to suggest admin filter is being checked or is failing.
Am I incorrectly understanding how the admin filter should work? If so, how can I get mattermost to set users that are part of a specific AD group as Admins in mattermost?