Can we able to change the AD domain settings port?

Is it possible to change the Active Directory (AD) domain settings port from 389 to 636 and enable TLS? if so kindly let us know how to do this

Hi @shaffusailpoint ,

If you mean changing the AD port to 636 from AD connector/source on IDN, yes you can change the port and enable TLS checkbox on the connector.

You will need to add the relevant AD certificates to VAs at /home/sailpoint/certificates folder and restart the ccg service before proceeding to test the connection.

If you have IQ service configured, you will need to enable TLS connection from VA to IQ service as well and configure the IQ service accordingly on the source. TLS Configuration on Virtual Appliances will help

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.