Add documentation for LDAP group mapping