The ID-Plugin functionality automatically looks up the user account based on the smart card's certificate. In order to do this, the Identity Plug‑in runs before the login and performs an LDAP directory search for a user account match. When installing, you must specify the LDAP Server and LDAP search base. The ID-Plugin does an LDAP subtree search starting at the specified search base.