Currently, ACS only does authentication on LDAP server. The user roles have to be configured manually in cloudstack. Also, we don’t support multiple LDAP servers. I am planning to work on adding LDAP authorisation and multiple LDAP server support to CloudStack
The proposal is @ https://cwiki.apache.org/confluence/display/CLOUDSTACK/LDAP+user+Authorization Let me know your comments/suggestions ~Rajani
