Extension:LDAPAuthorization

This extensions checks for certain authorization requirements when logging into a wiki by using Extension:PluggableAuth or Extension:Auth remoteuser. If one of the requirements are not satisfied the login process will be cancelled.

Domain config settings
If you want to configure this in  you can extend the configuration for LDAPProvider like in this example:

Here is a complete example  configuration for Active Directory: