Update additional groups documentation

Author: adorton-adobe

Gemfile

@@ -27,3 +27,5 @@ end
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
 gem 'tzinfo-data', platforms: [:mingw, :mswin, :x64_mingw, :jruby]
 
+
+gem "webrick", "~> 1.7"

Gemfile.lock

@@ -1,9 +1,12 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (3.2.22.5)
-      i18n (~> 0.6, >= 0.6.4)
-      multi_json (~> 1.0)
+    activesupport (6.0.6)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 0.7, < 2)
+      minitest (~> 5.1)
+      tzinfo (~> 1.1)
+      zeitwerk (~> 2.2, >= 2.2.2)
     addressable (2.8.1)
       public_suffix (>= 2.0.2, < 6.0)
     coffee-script (2.4.1)
@@ -20,13 +23,13 @@ GEM
       http_parser.rb (~> 0)
     ethon (0.16.0)
       ffi (>= 1.15.0)
-    eventmachine (1.2.7-x64-mingw32)
+    eventmachine (1.2.7)
     execjs (2.8.1)
-    faraday (2.6.0)
+    faraday (2.7.2)
       faraday-net_http (>= 2.0, < 3.1)
       ruby2_keywords (>= 0.0.4)
-    faraday-net_http (3.0.1)
-    ffi (1.15.5-x64-mingw32)
+    faraday-net_http (3.0.2)
+    ffi (1.15.5)
     forwardable-extended (2.6.0)
     gemoji (3.0.1)
     github-pages (227)
@@ -203,24 +206,24 @@ GEM
     kramdown-parser-gfm (1.1.0)
       kramdown (~> 2.0)
     liquid (4.0.3)
-    listen (3.7.1)
+    listen (3.8.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
     mercenary (0.3.6)
     minima (2.5.1)
       jekyll (>= 3.5, < 5.0)
       jekyll-feed (~> 0.9)
       jekyll-seo-tag (~> 2.1)
-    multi_json (1.15.0)
-    nokogiri (1.13.9-x64-mingw32)
+    minitest (5.17.0)
+    nokogiri (1.13.10-arm64-darwin)
       racc (~> 1.4)
     octokit (4.25.1)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
     pathutil (0.16.2)
       forwardable-extended (~> 2.6)
     public_suffix (4.0.7)
-    racc (1.6.0)
+    racc (1.6.2)
     rake (13.0.6)
     rb-fsevent (0.11.2)
     rb-inotify (0.10.1)
@@ -242,28 +245,30 @@ GEM
       unf (~> 0.1.4)
     terminal-table (1.8.0)
       unicode-display_width (~> 1.1, >= 1.1.1)
+    thread_safe (0.3.6)
     typhoeus (1.4.0)
       ethon (>= 0.9.0)
-    tzinfo (2.0.5)
-      concurrent-ruby (~> 1.0)
-    tzinfo-data (1.2022.6)
-      tzinfo (>= 1.0.0)
+    tzinfo (1.2.10)
+      thread_safe (~> 0.1)
     unf (0.1.4)
       unf_ext
-    unf_ext (0.0.8.2-x64-mingw32)
+    unf_ext (0.0.8.2)
     unicode-display_width (1.8.0)
+    webrick (1.7.0)
+    zeitwerk (2.6.6)
 
 PLATFORMS
-  x64-mingw32
+  arm64-darwin-21
 
 DEPENDENCIES
   github-pages
   jekyll-feed (~> 0.6)
   just-the-docs
   tzinfo-data
+  webrick (~> 1.7)
 
 RUBY VERSION
-   ruby 2.6.3p62
+   ruby 3.1.3p185
 
 BUNDLED WITH
-   2.3.18
+   2.3.26

en/user-manual/advanced_configuration.md

@@ -640,7 +640,7 @@ the next batch.
 # Additional Group Options
 
 It is possible for the User Sync Tool to sync group relationships that
-are not explicitly mapped out in `user-sync-config.yml`.  Any LDAP group
+are not explicitly mapped out in `user-sync-config.yml`.  Any identity source group
 that a user belongs to directly can be mapped and targeted to an Adobe
 profile or user group using the `additional_groups` configuration
 option.
@@ -658,25 +658,42 @@ Possible use cases:
 ## Additional Group Rules
 
 `additional_groups` is defined in `user-sync-config.yml` in the `groups`
-object.  It specifies a list of rules to identify and filter groups
-present in the `memberOf` LDAP attribute, as well as rules that govern
-how corresponding Adobe groups should be named.  Groups that are
-discovered with this feature will be added to a user's list of
-targeted Adobe groups.
+object. It consists of a series of rules that can identify groups assigned
+to a given user. These rules are used to assign users to groups dynamically
+based on information matched in the groups matched from the identity source.
 
 **Note:** Additional group mapping will fail if a multiple source groups
 map to the same target group.
 
-## Configure 'dynamic_group_member_attribute'
+## Directory Connector Support
 
-From User Sync tool 2.5 onward, you are required to mention the `memberOf` 
-LDAP attribute in `connector-ldap.yml`. There is no default value and if 
-`addtional_groups` is defined but `dynamic_group_member_attribute` not defined,
-you would see an warning. Here is example:
+1. `ldap`
 
-```yaml
-dynamic_group_member_attribute: 'memberOf'
-```
+   From User Sync tool 2.5 onward, you are required to mention the `memberOf` 
+   LDAP attribute in `connector-ldap.yml`. There is no default value and if 
+   `addtional_groups` is defined but `dynamic_group_member_attribute` not defined,
+   you would see an warning. Here is example:
+
+   ```yaml
+   dynamic_group_member_attribute: 'memberOf'
+   ```
+   
+2. `csv`
+
+   The CSV connector supports `additional_groups` rules with no special
+   configuration. Any groups assigned a user in the `groups` column of the input
+   file will be checked in the additional groups logic.
+   
+3. `adobe_console`
+
+   The `adobe_console` connector works similarly to the `csv` connector. All
+   groups assigned to a user are checked in the Additional Groups rules if
+   `additional_groups` is enabled.
+
+4. `okta`
+
+   `additional_groups` functionality is not supported for the Okta connector due
+   to the nature of the Okta's group API.
 
 ## Additional Group Example