anchor.diff:  
   --
   
  -. (Optional) Configure how {security} should interact with multiple LDAP servers. 
  +. (Optional) Configure how the {security-features} interact with multiple LDAP
  +servers. 
   + 
   --
  -The `load_balance.type` setting can be used at the realm level. {security} 
  -supports both failover and load balancing modes of operation. See 
  -<<ref-ldap-settings>>.
  +The `load_balance.type` setting can be used at the realm level. The {es}
  +{security-features} support both failover and load balancing modes of operation.
  +See <<ref-ldap-settings>>.
   --
   
   . (Optional) To protect passwords, 
  
positive.code: [[configuring-ldap-realm]]
  === Configuring an LDAP realm
  
  You can configure {security} to communicate with a Lightweight Directory Access
  Protocol (LDAP) server to authenticate users. To integrate with LDAP, you
  configure an `ldap` realm and map LDAP groups to user roles.
  
  For more information about LDAP realms, see 
  {xpack-ref}/ldap-realm.html[LDAP User Authentication].
  
  . Determine which mode you want to use. The `ldap` realm supports two modes of 
  operation, a user search mode and a mode with specific templates for user DNs. 
  
negative.code: --
  By default, `ldap_dn` and `ldap_groups` are populated in the user's metadata. 
  For more information, see 
  {stack-ov}/ldap-realm.html#ldap-user-metadata[User Metadata in LDAP Realms]. 
  
  The example below includes the user's common name (`cn`) as an additional
  field in their metadata.
  