Thanks for your answer. Accendently I found a salution for my problem just now. All existing documententation don't describe in detail how this module exactly work . Here a small explaination for further visitors:
First thing: You cannot import any ldap groups only.
In configuration "Ldap Identity provider" you can define a user filter. If you define a group filter as well every single ldap user will apply with defined group filter. I found it out by reading the debug output. In general the attribute member in group object contains the member of this group. At the end of the dialog exists a configuration field wich allows you to connect each filters together.
After this and the others configuration, the result is: only the groups will be imported which are used by previously selected users.
