Where the same LDAP connection manager is used to load roles as was used for authentication we need to ensure the actual connection to the server is re-used.

At this stage the connection will be cached in the shared state if the password was successfully validated, the step to load the groups will then close it.