Hi,
This configuration could be fine if you use Active Directory
Subject Objectclass: Person
Subject Name Attribute: sAMAccountName (if you want to use username as login@domain : use UserPrincipalName)
Group Objectclass: Group
Group Map Attribute: memberOf
Subject Objects Contain Reference To Groups (if you want to check authorization with LDAP groups)
Subject Search Base: Your base DN (DC=CISCO, DC=COM for example)
Group Search Base: Your base DN (DC=CISCO, DC=COM for example)
Other fields are optionals.
HTH,
Patrick