Using Shield with SSO and ldap authorization