If the group membership contains distinguished names, specify the attribute used to name/search for users. If you are using LDAP authentication, this value should match the attribute specified in the 'ID Number' mapping in the LDAP authentication plugin.