When querying openldap for user and what groups they're assigned to you need to parse the following response
When querying openldap for user and what groups they're assigned
to you need to parse the following response

[('uid=damian,ou=Users,dc=example,dc=com',
  {'memberOf': ['cn=engineering,ou=groups,dc=example,dc=com',
                'cn=linux,ou=Groups,dc=example,dc=com']})]

I used the following LDAP arguments:-

auth.ldap.server: 'ldaps://example.com'
auth.ldap.tls: True
auth.ldap.uri: 'ldaps://example.com'

auth.ldap.basedn: dc=example,dc=com
auth.ldap.binddn: uid={{ username }},ou=Users,dc=example,dc=com  # This causes the user to authenticate as themsevles to get the group details

auth.ldap.accountattributename: 'uid'
auth.ldap.groupattribute: 'memberOf'  # Get all the groups associated with the user

auth.ldap.groupou: 'Users'  # I query the users group and can get the list of groups associated with the user
auth.ldap.groupclass: 'person'

saltstack/salt,saltstack/salt,saltstack/salt,saltstack/salt,saltstack/salt