Adding the Azure AD member to AAD DC Administrator group
After enabling Secure LDAP, you a provided with the external IP address for this service. In the following step, you will edit the necessary network security group to add port 636, to allow external access.
-
From the Azure AD Domain Service, go to Settings > Properties and click under Network security group associated with subnet.
-
Go to Settings > Inbound security rules, find the security rule named Port_636, and make sure its Action is set to Allow.
-
Save changes to the network security group.
-
Go back to Settings > Properties from the Azure AD Domain Service page, select a member and add it to the AAD DC Administrator group, and allow to use it as bind DN.
-
When finished, you must logout of Microsoft Azure and login as the member you just added, and change the member's password.
|
This step is necessary in order to make the bind DN work correctly. |