NPM Webconsole authentication - mix AD and LDAP?

mshaw1

Is it possible to use both AD and a separate LDAP directory for authentication?  Our use case is based on internal corporate access vs. customer dashboards.
We have a separate LDAP authentication system for customers while all corp users are in AD.

We do have a separate web server front end that faces the Internet for customer access - can I set that one up to authenticate off of LDAP and leave the internal website tied to AD?

If none of that is possible, does anyone know of a good platform to front both and non-Microsoft LDAP directory and AD with (presumably) an LDAP front end?

silverbacksays

Currently it's one or the other, not both. By default Orion uses MSAPI to access AD, but you can override this and switch to LDAP in 'Advanced AD Settings', under the 'User Accounts' section of all settings. I'm not aware of a way of having a single authentication point for both types. Maybe you could add your LDAP domain as a Foreign Domain in ADAC, but I don't think this then lets domain resources authenticate with them.