AD test connection is failing if TLS option is checked

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.5

Screenshot 2026-08-27 080329
Screenshot 2026-08-27 0803291802×229 9.18 KB

Please share any images or screenshots, if relevant.

[Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

AD test connection is failing due to this error

2

Have you followed and completed the TLS setup for IQservice. The following reference lists down the steps

https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273

3

@akashk Mostly it is related to TLS Setup as recommended by @SanjeevIAM . In case it doesn’t work, please follow below troubleshooting steps:

  1. Check the IQService logs for detailed error messages related to the TLS handshake failure.
  2. Ensure the TLS version is compatible between AD Server and IQService.
  3. Ensure ports are open: 636 in LDAPS and is allowed from IQService.
  4. Check AD SSL certification is not expired.
4

Hello Akash. I would check the IQService port first. Unsupported or unrecognized SSL message usually means IIQ is sending TLS to a non-TLS IQService port.

Run IQService.exe -v and confirm a Configured TLS Port is shown. For an existing instance, configure it if needed:

IQService.exe -o <TLS-port>

Restart IQService, use that same port in the AD application with Use TLS for IQService checked, and register the client-auth user:

IQService.exe -a "Domain\User"

Also enter that IQService User and its password in the AD application. Client authentication is mandatory with TLS, and those fields are required once Use TLS for IQService is enabled. See Securing the Communication Path to IQService.

If the TLS port is already correct, I would next check the IQService certificate, the IIQ JVM trust configuration, and the IQService version. See IQService Troubleshooting and IQService Commands.

5

First Check whether you have imported the IQService Certificate in all the application servers of SailPoint. Then also import the IQService Certificate in Personal>certificates folder of the IQService Server. Also configure the IQService in TLS port. “IQService.exe -o ”.

Hope this helps.

image

6

Kindly go through below URL

7

Hi @akashk - let us know if any of these has helped you resolve the problem or any issues you are still facing.

There are a lot of little pieces as describe above to get TLS working to the IQService :slight_smile: