Dynamic Groups: Add onPremisesDistinguishedName property
If you are syncing multiple domains, it would be nice if you can target users from a specific domain:
user.onPremisesDistinguishedName -contains "DC=contoso,DC=com"
Well you should be able to do this by using a regex on the onpremisessecurityIdentifier attribute right now. However if your OU structure reflects Business Unit structure then the DN would be very useful as something to filter against...