---
title: "Configure The Active Directory Server With LDAP Over SSL"
slug: "configure-the-active-directory-server-with-ldap-over-ssl"
updated: 2026-11-05T06:45:38Z
published: 2026-11-05T06:45:38Z
canonical: "docs.biztalk360.com/configure-the-active-directory-server-with-ldap-over-ssl"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.biztalk360.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure The Active Directory Server With LDAP Over SSL

By default, BizTalk360 uses **IIS Windows Authentication**. The user's credentials are validated by Active Directory using the Kerberos or NTLM protocol.

If you would like to use LDAP authentication over SSL, you are required to make the following changes in the BizTalk360 database:

1. In the BizTalk360 database, add the following row to the table dbo.b360_admin_GlobalProperties;

> [!TIP]
> Note: Change the server name and DC name as per your environment

```sql
INSERT INTO dbo.b360_admin_GlobalProperties (SettingKey,SettingValue) VALUES ('AD_PATH','server01:636/OU=users,DC=kovai,DC=com')
```
2. Once these changes are made, BizTalk360 should be able to work on LDAP authentication over SSL.
3. To verify if the configuration was successful, you can try adding a user/NT Group into BizTalk360 and check if they can access BizTalk360 without any challenges.

#### **FAQ on LDAP over SSL:**

1. If AD_PATH is configured, it is used exclusively for the LDAP connection. There is no fallback mechanism.

However, if AD_PATH is not configured, BizTalk360 uses the domain name specified in the user name to perform the Active Directory (AD) lookup.
2. If the LDAP connection fails, the details are logged as feature-level entries in the [BizTalk360 Logs](https://docs.biztalk360.com/v12/docs/biztalk360-logs).