diff --git a/docs/manual/src/docbook/ldap-auth-provider.xml b/docs/manual/src/docbook/ldap-auth-provider.xml
index 6fbab0368f..a8c1c44768 100644
--- a/docs/manual/src/docbook/ldap-auth-provider.xml
+++ b/docs/manual/src/docbook/ldap-auth-provider.xml
@@ -356,12 +356,14 @@ public interface UserDetailsContextMapper {
void mapUserToContext(UserDetails user, DirContextAdapter ctx);
}]]>
Only the first method is relevant for authentication. If you
- provide an implementation of this interface, you can control exactly how the
- UserDetails object is created. The first parameter is an instance of Spring LDAP's
- DirContextOperations which gives you access to the
- LDAP attributes which were loaded. The username parameter is the
- name used to authenticate and the final parameter is the collection of authorities
- loaded for the user.
+ provide an implementation of this interface and inject it into the
+ LdapAuthenticationProvider, you have control over exactly how
+ the UserDetails object is created. The first parameter is an instance of Spring
+ LDAP's DirContextOperations which gives you access to
+ the LDAP attributes which were loaded during authentication. The
+ username parameter is the name used to authenticate and the final
+ parameter is the collection of authorities loaded for the user by the configured
+ LdapAuthoritiesPopulator.
The way the context data is loaded varies slightly depending on the type of
authentication you are using. With the BindAuthenticator, the
context returned from the bind operation will be used to read the attributes,
diff --git a/ldap/src/main/java/org/springframework/security/ldap/userdetails/UserDetailsContextMapper.java b/ldap/src/main/java/org/springframework/security/ldap/userdetails/UserDetailsContextMapper.java
index 2992f569dd..766c28ec9d 100644
--- a/ldap/src/main/java/org/springframework/security/ldap/userdetails/UserDetailsContextMapper.java
+++ b/ldap/src/main/java/org/springframework/security/ldap/userdetails/UserDetailsContextMapper.java
@@ -22,8 +22,9 @@ import org.springframework.ldap.core.DirContextOperations;
import org.springframework.ldap.core.DirContextAdapter;
/**
- * Operations to map a UserDetails object to and from a Spring LDAP DirContextOperations implementation.
- * Used by LdapUserDetailsManager when loading and saving/creating user information.
+ * Operations to map a UserDetails object to and from a Spring LDAP {@code DirContextOperations} implementation.
+ * Used by {@code LdapUserDetailsManager} when loading and saving/creating user information, and also by the
+ * {@code LdapAuthenticationProvider} to allow customization of the user data loaded during authentication.
*
* @author Luke Taylor
* @since 2.0