A new client has required us to authenticate login users to our web, iOS and android apps against his active directory using LDAP. He wants to control the grouping of his users so as to control the permissions. i.e. admin, manager, staff. etc. I've searched it and am lost as to even know where to start. Any help?