silverstripe / silverstripe-activedirectory

                    }

                    // the user is a direct member of group with a mapping, add them to the SS group.

                    if ($mapping->DN == $groupDN) {

                        $group = $mapping->Group();

                        if ($group && $group->exists()) {

                            $group->Members()->add($member, [

                                'IsImportedFromLDAP' => '1'

                            ]);

                            $mappedGroupIDs[] = $mapping->GroupID;

                        }

                    }

                    // the user *might* be a member of a nested group provided the scope of the mapping

                    // is to include the entire subtree. Check all those mappings and find the LDAP child groups

                        }

                        foreach ($childGroups as $childGroupDN => $childGroupRecord) {

                            if ($childGroupDN == $groupDN) {

                                $group = $mapping->Group();

                                if ($group && $group->exists()) {

                                    $group->Members()->add($member, [

                                        'IsImportedFromLDAP' => '1'

                                    ]);

                                    $mappedGroupIDs[] = $mapping->GroupID;

                                }

                            }

                        }

                    }

                }