This is a membership provider that allows you to use Active Directory(AD) authentication. Before the AD users can log in an account must be created in umbraco. The password of the account created does not matter since the user will use AD for the password. It also allows you to use the built in umbraco authentication at the same time (but this can be turned off). So you can have users that are not in AD.