ZuluDesk & LDAPS & Firewall

[CHiLL]

I hope this is the right section!

 

We are testing ZuluDesk as an MDM for our iPads and we are going to use LDAPS to authenticate with our AD. However, I'm having issues with the authentication. We don't have an external IP or firewall ports open for our DC. Ideally, I'd rather not expose our DC directly. When testing internally, LDAPS is enabled on our DCs and working (tested and confirmed using ldp.exe).

 

We do have AD FS enabled, with a server located in our DMZ. I am led to believe that AD FS has LDAPS enabled, or at least can communicate to AD using LDAPS.

 

However, despite allowing TCP port 363 on both inbound and outbound rules on the AD FS server, I cannot get ldp.exe to communicate with our AD FS server's internal FQDN address.

 

I don't know if I've got the wrong end of the stick completely regarding LDAPS, AD FS and authentication.

 

Can anybody advise?