operator reference Active Directory TODO: Direct configuration from the ad-auth plugin and reference it