https://ones.com/blog/streamlining-user-authentication-ldap-ad-directory-sync-security/