User auth should allow setting TS Variable for AD attrib