Skip to main content

How dynamic list filters work

See which attribute, date, and SCIM group filters you can use in a dynamic list.

Use this article when you need help choosing filters for a dynamic list. It explains attribute filters, date filters, SCIM group filters, and SCIM group membership date filters.

Availability

  • Dynamic lists are available for Enterprise organizations with SCIM directory sync enabled.

  • See If a feature is locked if dynamic-list filters are unavailable.

  • SCIM group and SCIM group membership date filters are available when the SCIM groups beta is enabled for your organization.

How a dynamic list filter row works

Each filter row has three parts:

  • Attribute. The directory field, or special filter type, that you want to use, such as departmentName or SCIM group.

  • Comparison. How Knowly should compare the value, such as is, is not, is before, or is after.

  • Value. The value the attribute should match.

When you have more than one row, you combine them with and or or. Use and to narrow the list; use or to widen it.


Directory attribute filters

Text attributes. These are directory fields that your SCIM provider syncs into Knowly, such as departmentName, addressLocality, addressCountry, employeeType, or managerEmail.

  • is matches users whose attribute equals the value.

  • is not matches users whose attribute does not equal the value.

Date attributes. These are date-based fields such as createdAt or employmentStartDate.

  • is matches a specific date.

  • is after / is after or same as matches users whose date is later than, or on or after, the value.

  • is before / is before or same as matches users whose date is earlier than, or on or before, the value.

Use date filters for rolling audiences such as everyone with an employment start date on or after 1 January.


Create dynamic list drawer with the attribute dropdown open, listing departmentName, addressCountry, addressLocality, employeeType, and managerEmail as plain text, with employmentStartDate and createdAt highlighted in blue at the bottom


Attribute dropdown in the "Create dynamic list" drawer, showing text attributes like departmentName and date attributes like employmentStartDate and createdAt


SCIM group filters

When the SCIM groups beta is enabled, two additional filter types are available:

SCIM group. Matches users who belong to a specific SCIM group synced from your identity provider.

  • is matches users who are currently members of the selected group.

  • is not matches users who are not members of the selected group.

SCIM group membership date. Matches on when a user became a member of a specific SCIM group.

  • is after / is after or same as matches users who joined the group after, or on or after, the given date.

  • is before / is before or same as matches users who joined the group before, or on or before, the given date.

Group no longer available. If a SCIM group that a list filter depends on is later removed from your identity provider, Knowly marks that filter with Group no longer available. The filter keeps targeting the same stable group identifier, so it simply produces no matches until the group is restored.


Create dynamic list drawer with the attribute dropdown open, SCIM group and SCIM group membership date highlighted in blue at the top, followed by departmentName, addressCountry, addressLocality, employeeType, managerEmail, employmentStartDate, and createdAt in plain text below


Attribute dropdown in the "Create dynamic list" drawer with "SCIM group" and "SCIM group membership date" highlighted


Tips for good filters

  • Start broad, then narrow. Begin with the largest attribute you trust, such as department or country, then add rows to narrow.

  • Use the live preview. The Current users on this list panel shows how many users match right now. A zero count often means a value is misspelled or the wrong attribute was selected.

  • Mix filter types when needed. You can combine regular directory attributes and SCIM group filters in the same list.

  • Fix the source data if something looks off. If a directory field is inconsistent across users, the list will be inconsistent too. When you fix the data in your identity provider, the dynamic list updates automatically.

Did this answer your question?