...
Go to User Storage Federation menu option
On the right side, there is a list box labeled Add Provider. Select the LDAP provider type and you will be sent to the provider's settings page.
Adjusts settings according to screen below:
Enter the display name for the provider
Choose Active Directory in Vendor field
Set Import users to On. Authority Service will import users into local database.
Set Edit Mode to Read Only. You will be unable to modify the username, email address, first and last names, or any other mapped attributes. Updates to passwords are not supported.
Set Sync registrations to Off. Users created in Authority Service will not be synced back to LDAP.
Set Username LDAP attribute to “sAMAccountName”. This will set username of imported user to it’s Active Directory user name.
Set Custom User LDAP Filter to (&(objectCategory=Person)(sAMAccountName=*)) to import users with sAMAccountName attribute set only.
If you want to filter users to be imported by AD Group, extend filter with memberOf clause. For example, given that you want to import users in SagaUsers group only and distinguished name of that group is CN=SagaUsers,OU=Groups,DC=company,DC=internal, use following filter (&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=SagaUsers,OU=Groups,DC=company,DC=internal)) .
Set Search Scope to Subtree.
Set Bind DN and Bind Credential with the domain user created in prerequisites.
Go to Mappers tab and edit "username" mapper. Change LDAP Attribute to sAMAccountName
Configuring Single Sign On
...