TIS can use AD for authentication. The userManagement.Provider must be set to AdOrDefault. The host on which TIS is running must be member of the AD.

Element	Description
XLdapAuthImplementations.path	AD path
XLdapAuthGroup.ldapgroup	source LDAP group which will be mapped
XLdapAuthGroup.tisgroup	target TIS groups semicolon delimited

Sample

TIServiceWindowsService.exe.config

<userManagement>
  <!-- Provider: value="Default", value="Interflex", value="AdOrDefault" -->
  <add key="Provider" value="AdOrDefault"/>
</userManagement>
<XLdapAuthImplementations path="LDAP://company.local">
  <XLdapAuthGroups>
    <XLdapAuthGroup ldapgroup="app.company.tis.benutzer" tisgroup="TISBoardUser;Benutzer" />
    <XLdapAuthGroup ldapgroup="app.company.tis.hauptbenutzer" tisgroup="TISBoardUser;Hauptbenutzer" />
    <XLdapAuthGroup ldapgroup="app.company.tis.admin" tisgroup="TISBoardUser;Admin" />
    <XLdapAuthGroup ldapgroup="app.company.tis.techniker" tisgroup="TISBoardUser;Support" />
  </XLdapAuthGroups> 
</XLdapAuthImplementations>

One role in tisgroup must be a template-role, see also Deploy Pages & Delete deployed pages.