@brenton - @liggit suggested you might be a good person to review this documentation for clarity due to your familiarity with LDAP.