Group filter for #5133

.env.example

@@ -185,6 +185,16 @@ LDAP_PASSWORD=super_secret
 
 LDAP_AUTH_FIELD=uid
 
+#
+# If you wish to only authenticate users from a specific group, use the
+# group filter. Leave empty or remove if not in use.
+#
+# Example: cn=Administrators,dc=local,dc=com
+#
+# The group filter will only be applied after the user is authenticated.
+#
+LDAP_GROUP_FILTER=
+
 #
 # Remote user guard settings
 #