适当集成php + oracle + active目录

I have the following situation: creation of a application on that different users will be able to edit data in a oracle database. I have already an active directory for them and a oracle on the server. Because, i want just specific users from specific group in ad to be able to edit data and i dont want to create a table with those users and put them set again password in oracle , same like that in ad, i need an idea because i dont know how to do this. I know to use ldap php, php with oracle , but how can i do to integrate them?