I'd like a hint regarding ldap.properties

[Joe Edwards]

This search works:
ldapsearch -H ldaps://testad.uwmc.edu:636/ -b \
"ou=useraccounts,dc=testad,dc=uwmc,dc=edu" -D \
  testad\\userId -W -x sAMAccountName=userId

I can bind like so:
sprintf( bind_dn, "testad\\%s", argv[1] ); // argv[1]==userId
rc = ldap_sasl_bind( ld, bind_dn, LDAP_SASL_SIMPLE, &passwd, NULL, NULL, &msgid );

How do I configure ldap.properties? I am connecting to the AD server.
The username and password is not being sent correctly. I'm seeing:
2015-04-29 17:32:35,093
-INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:194]
-Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'joe' failed

Current ldap.properties settings:
idp.authn.LDAP.authenticator     = directAuthenticator
idp.authn.LDAP.baseDN            = ou=useraccounts,dc=testad,dc=uwmc,dc=edu
#idp.authn.LDAP.subtreeSearch    = false
idp.authn.LDAP.userFilter        = sAMAccountName={user}
idp.authn.LDAP.bindDN            =
idp.authn.LDAP.bindDNCredential  =
idp.authn.LDAP.dnFormat          = testad\%s

Thanks, Joe