Filtering was introduced in version 3.4.18 of Kantega SSO. This allows you to limit the set of users and groups being extracted from the cloud repository. For Okta and Google Gsuite, you can filter users based on their group memberships. For Azure AD, you can filter both by group memberships and user type. The screenshot below shows how these filters are set up.
Filtering is useful when you have a large organization where only a subset should get access to the specific Atlassian products.
Username transformation allows you to remove domain-part information from usernames. If you have usernames like john.doe@EXAMLE.com in your cloud repository, this transformation will create user record on the Atlassian side only containing the name part (john.doe).