Topic on Manual talk:Active Directory Integration/Flow

The Auth_remoteuser extension is not mentioned in this article, but appears to be required for AD authentication to work.