Enabling Secure LDAP for external access
After the Azure AD Domain Service instance has been created, you must enable Secure LDAP to allow external access.
-
Generate a self-signed certificate with SubjectName as the DNS domain name, making sure that the certificate usage is set correctly.
-
Export the self-signed certificate MMC console (certificate snap-in) with the private key.
-
From your newly created Azure AD Domain Service in Microsoft Azure, go to Settings > Secure LDAP.
-
Enable Secure LDAP and Allow secure LDAP access over the internet, and import the certificate.
Below is an example of the PowerShell commands used to create a self-signed certificate.
