We have LDAP authentication configured to load users from several AD groups, depending on the access we want them to have (read only, admin, power users).
In Manage LDAP Host, we use sAMAccountName for the username field, because when we used UID, it created the user name in vCOps as "name.domain.com". When we were setting this up, our AD team was moving people around domains and some of our pilot team were moved and their user ID was no longer the same, so they couldn't log in.
In the Base DN, we use an AD OU that contains the AD groups that we set up for vCOps users. We then import the users from the AD groups into the corresponding vCOps groups.
Username, we used the domain\username format, so yes, that does work also.
