Flow/Settings/Users/New LDAP

From the Settings->Users page you can scroll to the "New LDAP User" and "New LDAP Group" panels.

From here you can enter the domain name and useid of the user you want to allow to log into the system. They will be added as normal users. You can subsequently edit the user from the list at the top of the screen if you wish to change their permissions.

From the "New LDAP Group" panel, you can select from a list of previously discovered LDAP groups, select the User role and then add.

You can also apply a filter to limit the results of the groups available. Enter entry (you can surround with * for wild card searches) and press "Apply LDAP Filter" button

This will allow all members of that group to log in with the required Role.