Indeed, that was pretty much what I needed. Only caveat I found, is that OTRS by default filters on &quot;memberUid&quot; and AD uses &quot;member&quot;. Quickly fixed by adding a similar directive as in the authentication part:<div>

<div><br></div><div>$Self-&gt;{&#39;AuthSyncModule::LDAP::AccessAttr&#39;} = &#39;member&#39;;</div></div><div><br></div><div>Thank you very much!</div><div><br></div><div>best regards </div><div>Jørn-Stian</div>