https://ones.com/blog/knowledge/streamlining-user-authentication-ldap-ad-directory-sync-security/