Filter LDAP by OU parameter with default K2 label

A standard Active Directory service (or synchronization service) should allow filtering of identities synchronized with K2 label by the LDAP organizational unit parameter (something like this LDAP://OU=department,DC=company,DC=com). Because this is not possible today, we have over a million identities and another 1.5 million synchronized groups, when we only need a thousand of each, resulting in long load times when using the control to select users or groups from AD. The synchronization task also takes much longer than necessary.