In my application I use form-based authentication with a LDAP-Realm. For Authorization I use a database. As I understand this works as follows
App --> (user,
You could customize it using Spring Security, authenticating against LDAP and configuring the authentication manager/authentication-provider: