In the authentication module, we use a directory searcher with this search filter:
(&(ObjectClass=Person)(SAMAccountName={0}))