I've tried to add LDAP authentication in my domain.xml under <management> but I can't start the domain. where should i set the ldap settings?

this is what i added:

        <security-realms>
            <security-realm name="ManagementRealm">
                <authentication>
                    <ldap connection="name" base-dn="DC=xxx,DC=de" memberOf="CN=xxx,OU=xxx,OU=Groups,DC=xxx,DC=de">
                        <username-filter attribute="sAMAccountName" />
                    </ldap>
                </authentication>
            </security-realm>


         </security-realms>


        <outbound-connections>
            <ldap name="xxx" url="ldap://IP:389" search-dn="CN=xxx,CN=Benutzer,CN=xx,CN=Abteilungen,CN=xxx,DC=xxx,DC=de" search-credential="PW"/>
        </outbound-connections>

2019-08-14T17:31:26.650804+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[0m#033[33m17:31:26,647 WARN  [org.jboss.as.domain.management.security] (MSC service thread 1-4) WFLYDM0111:

Keystore /opt/wildfly/domain/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost#033[0m

2019-08-14T17:31:28.476157+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[33m#033[0m#033[31m17:31:28,475 ERROR [org.jboss.as.controller] (Controller Boot Thread) #033[0m

2019-08-14T17:31:28.476688+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m#033[0m

2019-08-14T17:31:28.477537+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31mOPVDX001: Validierungsfehler in domain.xml -------------------------------------#033[0m

2019-08-14T17:31:28.477849+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|#033[0m

2019-08-14T17:31:28.478134+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|  46: </system-properties>#033[0m

2019-08-14T17:31:28.478435+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|  47: <management>#033[0m

2019-08-14T17:31:28.478760+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|  48:   <security-realms>#033[0m

2019-08-14T17:31:28.482795+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|      ^^^^ "security-realms" ist kein zulässiges Element hier#033[0m

2019-08-14T17:31:28.483195+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|           #033[0m

2019-08-14T17:31:28.483466+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|           Die folgenden Elemente sind hier zulässig: access-control #033[0m

2019-08-14T17:31:28.483752+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|#033[0m

2019-08-14T17:31:28.484029+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|  49:     <security-realm name="ManagementRealm">#033[0m

2019-08-14T17:31:28.484306+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|  50:         <authentication>#033[0m

2019-08-14T17:31:28.484578+02:00 wftest3 domain.sh[8668]: [Host Controller] #033[31m|  51:           <ldap connection="name" base-dn="DC=xxx,DC=de" memberOf="CN=xxx,OU=xxx,

OU=Groups,DC=xxx,DC=de">#033[0m