How to allow only specific users to log in to Collaborator

Hi

This Active Directory setting allow all users to log in:
<Realm className="org.apache.catalina.realm.JNDIRealm"

connectionName="your_ldap_username"

connectionPassword="xxxx"

connectionURL="ldap://mycompany.com:389"

referrals="follow"

userBase="CN=Users,DC=mycompany,DC=com"

userSearch="(sAMAccountName={0})"

userSubtree="true"

allRolesMode="strictAuthOnly"

/>

Then how to allow only specific users (for example: user1, user2) to log in to Collaborator by their id when Active Directory authentication is enabled? I tried changing the
userSearch="(sAMAccountName={0})"
to
userSearch="(|(sAMAccountName=user1)(sAMAccountName=user2))"
but it did not work.

Thank you