From 3e3f0b5e68db8d52d0fe1c6ec585e7e8d3fc0ad5 Mon Sep 17 00:00:00 2001
From: Roland <rasos@alton.at>
Date: Mon, 22 Oct 2018 07:20:17 +0200
Subject: [PATCH] Update ldap-integration.md

extended settings, default role
---
 .../setting-up/integrations/ldap-integration.md   | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md b/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md
index 0b787a34..2bd83375 100755
--- a/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md
+++ b/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md
@@ -1,16 +1,16 @@
 <!-- add-breadcrumbs -->
 #Setting up LDAP
 
-Lightweight Directory Access Protocol is a centralised access controll system used by many small medium scale organisations.
+Lightweight Directory Access Protocol is a centralised access controll system used by many small and medium scale organisations.
 
 By settings up LDAP service, you able to login to ERPNext account by using LDAP credentials.
 
-To setup LDAP,
+To setup LDAP, go to
 `Explore > Integrations > LDAP Settings`
 
 #### Setup LDAP
 
-To enable ldap service, you need to configure parameters like LDAP Server Url, Organizational Unit, UID, Base Distinguished Name (DN) and Password for Base DN
+To enable ldap service, you need to configure parameters like LDAP Server URL (including ldap://), Organizational Unit, UID, Base Distinguished Name (DN) and Password for Base DN
 
 <img class="screenshot" alt="LDAP Settings" src="{{docs_base_url}}/assets/img/setup/integrations/ldap_settings.png">
 
@@ -19,6 +19,15 @@ After setting up LDAP parameters, on login screen, the system enables **Login Vi
 
 <img class="screenshot" alt="LOGIN via LDAP" src="{{docs_base_url}}/assets/img/setup/integrations/login_via_ldap.png">
 
+For the extended fields, try these settings:
+
+    LDAP Search String: uid={0}     
+    LDAP First Name Field: cn     
+    LDAP Email Field: mail     
+    LDAP Username Field: uid
+
+The default role of a new LDAP user is `Blogger`. You might want to adapt the permissions of that role with the permission manager.
+
 #### Connecting to LDAP Securely
 
 In the LDAP Settings area, there are two dropdowns.