Hi Mike,
I am not sure what is going on on your system. I guess you are using i-doit 1.9 open or 1.9.1 pro? Do have a mapping between an LDAP group and an person group in i-doit? Or do you use the "Standard LDAP group" in your system settings?
Kind Regards,
Christian