An important addition to the domain authentication feature would be to specify an OU for the DPS to limit the area for Userimports. As it is now, our whole Active Directory is being searched to authenticate 1 User. Which is about 8k entries and we suspect this to cause significant impact on response time. Not only is it a performance question, it might also be a security concern.
Right now you can only specify the domain and an Active Directory permitted User.
Its been on an informal todo for a while now, I will create a ticket and set a high priority.
Our next major release (2019.1) is almost ready and I'm afraid it's "feature complete", it may have to wait for a minor release.
thanks for getting back so quickly! We will be looking forward to it then.