Users and Groups may be synchronised with a Active Directory. If you are working in a large organisation, syncing the whole AD is a bad idea. Group Filter lets you define which groups to synchronise and therefore which users in those groups will be synchronised.
Active directory Setup
Group Filter samples
All groups starting with "pulse-it" (&(objectClass=Group)(cn=pulse-it*))