Following a Microsoft security advisory about LDAP channel binding and LDAP signing enforcement on Active Directory Domain Controllers, what needs to be in place for Apps9 SSO with AD synchronization to keep working correctly?

All FAQ questions / Security and access

Answer

Apps9 needs to be running at least UPD14, which introduced a solution enabling LDAPS, LDAP over SSL, using the default LDAPS port 636, specifically for AD Synchronization. Environments below UPD14 don't have this LDAPS-enablement solution and would need to update to at least that level, or investigate whether the fix is available as a standalone single patch, to properly support LDAP channel binding and signing enforcement on the Domain Controller side.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions