Is anyone using LDAP for user authentication?

We would like to authenticate the Sugar users through our ActiveDirectory via LDAP.
We have several other applications doing this, including roles by assigning them to a group as a "member of" mechanism.