ARS_LDAP_OD_AUTHORITY_FALLBACK parameter
If set to TRUE and the user does not exist on the LDAP server, authentication will occur on the Content Manager OnDemand server.
Even if set to TRUE, Content Manager OnDemand must still be able to bind to and search the LDAP server. Otherwise, relevant LDAP connection or search error messages will be issued, and authentication will not be allowed.
Valid values are TRUE and FALSE. If the parameter does not exist or you do not specify a value, the default value is FALSE.
Example: ARS_LDAP_OD_AUTHORITY_FALLBACK=TRUE
This parameter is optional for LDAP authentication.