After a successful run of the LDAP-Sync tool, users can't login successfully.
Only after the synchronize button is clicked within the USER object, the login is successful.
Some AD/LDAP configurations allow a login only using the Distinguished Name (DN) - not using the form DOMAIN/USER. Hence, the DN-field in AE needs to be populated already during the run of LDAP-Sync.
Automation Engine 12.x
Set "updateDN" to "true" in the corresponding LDAP Sync configuration file (defaults.xml or client-specific *.xml file - depending on your setup)