Your LDAP setup will work as in 11.1x and higher you can setup classic LDAP (yours) and new setup integration. Good thing about new integration is that it grabs all users from the domain and them automatically assings roles (that holds SiS permissions) when you create and map them to the contexts of LDAP groups. There is no need to manually create each user and specify the LDAP provider and their Distiguish Name one by one; yet it can be done as I said.
Attaching a doc that explains new LDAP integration.
Kenneth Gonzalez HP Support
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.