Custom variable from LDAP

I have a VIP with APM using LDAP (Windows 2008 AD) for authentication, this much works fine. I need to grab some AD fields through the LDAP call and provide it to the application.     My though...