Hi folks,
I have signed up to a web service which has it's own authentication system but is moving over to AD authentication. I would like to move my school over to the AD authentication, but the service provider isn't using Federation Services, and is instead suggesting that one of my AD servers should have a public IP address so that they can use LDAP to read authentication data. Is this normal? I've never even considered giving one of my AD servers a public IP address, as the security implications slightly scare me.
Some feedback on this would be greatly appreciated.
Cheers