title: MVC Authorization based on OU in LDAP
body: <p>I have set up authorization using LDAP and ADFS. How can I restrict access to a controller or action based on the OU the user belongs to?</p>
  
  <p>[UPDATE]</p>
  
  <p>I already have authentication set up to the user I want. What I need is to be able to limit access to a controller/action based on what ON users belong to in Active Directory.</p>
  
  <p>For example:</p>
  
  <p>[Auhtorize(OU="MYOU")]
  public class Controller</p>
  
  <p>I tried using roles but it didn't work.</p>