Secure Mobile Access 12.4 Administration Guide

Configuring Microsoft Active Directory Servers

The appliance can validate username/password credentials against Microsoft Active Directory (AD) configured with either a single root domain, or one or more subordinate (child) domains. The below image shows typical Active Directory configuration options.

Microsoft Active Directory configuration options

You must modify your firewall or router to allow the appliance to communicate with your AD server. The appliance uses standard LDAP and LDAPS ports to communicate with Active Directory:

  • LDAP (389/tcp)

  • LDAP over SSL (636/tcp)

With Microsoft Active Directory Tree there are additional ports, which facilitate searches and logons:

  • Global catalog (3268/tcp)

  • Global catalog using SSL (3269/tcp)

  • Kerberos (88/tcp)

After configuring an AD server, you can validate the realm configuration settings by establishing a test connection. For more information, see Testing LDAP and AD Authentication Configurations.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.