The ondemandFilter Attribute
This attribute is required for user auto-creation and/or on-demand synchronization mode. It allows the Stages system to query the LDAP server for specific users by their Stages login name. The attribute value a query filter like the searchFilter attribute, except that it is meant for unique queries.
The ondemandFilter must contain the placeholder character “%” that will be replaced by the username when queries on the LDAP repository are made.