master-config.yaml

- name: AD
    challenge: true
    login: true
    mappingMethod: claim
    provider:
      apiVersion: v1
      kind: LDAPPasswordIdentityProvider
      attributes:
        id:
        - dn
        email:
        - mail
        name:
        - cn
        preferredUsername:
        - sAMAccountName
      bindDN: 'dominio\usuario'
      bindPassword: "password"
      ca: ""
      insecure: true
      url: "ldap://ad.example.com:389/DC=example,DC=com?sAMAccountName?sub?(&(objectClass=person)(memberOf=CN=G-ACESSO OPENSHIFT Administrators,OU=Grupos,OU=Administrativos - Contas e Grupos de serviços,DC=example,DC=com))"