When you want to enable Active Directory Login with Datapower and your members are part of a Group you need to add the following to your LDAP Search Credintials:
Name: ldapsearch
LDAP Base DN: ou=groups,dc=ibm,dc=com
LDAP Filter Prefix: (&(member=
LDAP Filter Suffix: )(|(cn=administrators)(cn=architects)(cn=operations)))
Hmmm nice info. thanks.