The PingDirectory Server supports dynamic groups with the groupofURLs object class. In general, you can import dynamic groups without modification.

To migrate dynamic groups:

  1. To enumerate any schema differences between the Directory Server Enterprise Edition (DSEE) deployment and the Ping Identity deployment, run the migrate-ldap-schema tool.
  2. To enumerate any configuration differences between the DSEE deployment and the Ping Identity deployment, run the migrate-sun-ds-config tool.
  3. Import or configure any necessary schema and configuration changes recorded by the tools used in steps 1 and 2.
  4. Import the existing users and groups using the import-ldif tool.