Authentication Sources - Active Directory
Suppose you have variables like belows
- USER=administrator (read only user is a good choice)
Default username field is sAMAccountName, Default installations uses this value.
Default groupname fields is memberOf. Default installations uses this value.
You can add only allowed active directory groups. If user belongs one of these groups, then allowed
Just enter username (without domain) and password for login