New Directory Sync configuration option

You can now disable Active Directory users in security groups.

If you don't want to trust Active Directory users in security groups, enabling this feature causes only registered users in the security groups to be synced.

To exclude the AD users from synching, you can do either: