When admin click on "save" after finishes to configure for LDAP authentication in ACCOUNTS in SMAX, system automatically start copying all users (based on the base dn, filters, and so on) to idm and bo_user databases.
After some hours also in SMAX all users from LDAP are copied.
My proposal is to not replicate users from LDAP.
Only at first login user should be replicated from LDAP to bo (and then to SMAX).
It happens the customer has 10000 users in LDAP and all users are copied into SMAX. Most of them are useless.