While members of a static LDAP group are listed individually, a dynamic LDAP group uses a search query to define and list its members. Thus, the results of this search query determine the members of the dynamic LDAP group.
User Management in LiveCycle ES2 does not currently support dynamic LDAP groups. However, if a dynamic LDAP group contains an attribute which lists the Distinguished Names (DNs) of the members of a group, User Management in LiveCycle ES or LiveCycle ES2 can successfully synchronize that group.
Dynamic LDAP groups in Tivoli LDAP Server have the ibm-allMembers operational attribute that displays all members of a group. These LDAP groups can therefore be successfully synchronized with User Management in LiveCycle ES or LiveCycle ES2.