You can also search using a POST /directory/v1/{dn}/subtree/search request to avoid placing confidential information in the request URI. Any parameters that are typically placed in the query string are passed in as a JSON object in the request body. The self and next links in the response have data attributes that contain the request body associated with the link.