If the group membership contains distinguised names, specify the attribute used to name/search users. If you are using LDAP authentication, this value should match the attribute specified in the 'ID Number' mapping in the LDAP authentication plugin