which option should you select if you want the gateway to reference the groups defined on the LDAP server for authentication purposes?