diff --git a/docs/manual/src/docbook/ldap-auth-provider.xml b/docs/manual/src/docbook/ldap-auth-provider.xml
index e77a0f88fb..1aef5b446e 100644
--- a/docs/manual/src/docbook/ldap-auth-provider.xml
+++ b/docs/manual/src/docbook/ldap-auth-provider.xml
@@ -127,10 +127,14 @@
                     <para> <literal>group-search-filter</literal>. The filter which is used to
                         search for group membership. The default is
                         <literal>uniqueMember={0}</literal>, corresponding to the
-                        <literal>groupOfUniqueMembers</literal> LDAP class. In this case, the
-                        substituted parameter is the full distinguished name of the user. The
-                        parameter <literal>{1}</literal> can be used if you want to filter on the
-                        login name.</para>
+                        <literal>groupOfUniqueNames</literal> LDAP class <footnote><para>
+                            Note that this is different from the default configuration of the
+                            underlying <classname>DefaultLdapAuthoritiesPopulator</classname>
+                            which uses <literal>member={0}</literal>.
+                        </para></footnote>.
+                        In this case, the substituted parameter is the full distinguished name
+                        of the user. The parameter <literal>{1}</literal> can be used if you
+                        want to filter on the login name.</para>
                 </listitem>
                 </itemizedlist> So if we used the following configuration <programlisting language="xml"><![CDATA[
   <ldap-authentication-provider user-dn-pattern="uid={0},ou=people"