ACS 5.3 - Connection to external ID store - encrypted?

[rolandgentile]

Pretty sure this is a dumb question, but are the connections between the ACS and external identity stores encrypted?

I know that when setting up LDAP identity store there is the option to specify SSL conection.  Are the other connections encrypted by default, or is the data sent between the ACS and AD, for example, sent in the clear?

[Nicolas Darchis]

It all depends on the identity store you are talking about.

If it's a Radius identity store (token server for example) then they talk RADIUS so there is a shared secret to encrypt the private data. All the attributes are still in clear though.

Active Directory is using Kerberos/NTLM encryption for everything.

LDAP, as you said, is either in clear or SSL encrypted.

[Ramraj Sivagnanam Sivajanam]

Hi Nicholas

Can ACS 5.3 connect to multiple external database e.g connect to 2 different Windows AD?

[Nicolas Darchis]

No.

You would need to add the 2nd AD as "ldap" database.