PicketLink IDP Ldap settings

standalone.xml

<security-domain name="idp" cache-type="default">
    <authentication>
        <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required">
            <module-option name="java.naming.provider.url" value="ldap://localhost:389"/>
            <module-option name="java.naming.security.authentication" value="simple"/>
            <module-option name="bindDN" value="cn=XXXXX"/>
            <module-option name="bindCredential" value="XXXXXX"/>
            <module-option name="baseCtxDN" value="ou=People,dc=XXXXX,dc=XXX"/>
            <module-option name="baseFilter" value="(uid={0})"/>
            <module-option name="rolesCtxDN" value="ou=groups,dc=XXXXX,dc=XXX"/>
            <module-option name="roleFilter" value="(uniqueMember={0})"/>
            <module-option name="roleNameAttributeID" value="cn"/>
            <module-option name="roleAttributeIsDN" value="true"/>
        </login-module>
    </authentication>
    <audit>
        <provider-module code="org.picketlink.identity.federation.core.audit.PicketLinkAuditProvider"/>
    </audit>
</security-domain>