Implementing Secured Communication to Top Secret LDAP Server

Secured communication to the Top Secret LDAP Server must be implemented using one of the following methods:

  • LDAP SSL – Communication must be implemented on a port defined to LDAP as secured (LDAPS).

    For more information, refer to LDAP Client Configuration and its related topics in the Broadcom documentation. Note that this document is not maintained by SailPoint, and is subject to change without notice.

    Note
    The Top Secret LDAP Server must have permission to access the key ring containing the Top Secret LDAP Server certificate and the CA certificate.

  • AT-TLS policy – Communication must be implemented on a port defined to LDAP as non-secured (LDAP). The TLS processing is done by TCPIP and is transparent to Top Secret LDAP Server.

    For more information, refer to this AT-TLS Policy Sample File.

The secured communication is implemented using server authentication.