diff --git a/tmpl/sunstone-ldap_auth.conf b/tmpl/sunstone-ldap_auth.conf
index 2644da5..766549c 100644
--- a/tmpl/sunstone-ldap_auth.conf
+++ b/tmpl/sunstone-ldap_auth.conf
@@ -30,6 +30,9 @@ server 1:
     # for Active Directory use this user_field instead
     #:user_field: 'sAMAccountName'
 
+    # Default group ID used for users in an AD group not mapped
+    :mapping_default: 1
+
 # List the order the servers are queried
 :order:
     - server 1