Most of the time, application designed to Active Directory are not efficiently written. For instance, a lot of these applications are connecting at the root of the AD forest when they may only have to search one or two containers in it. Aside from that, various applications only require to view the groups and users but they are actually given access to view more than what they are exactly looking for. The reason for this is the lack of the ability to control what is being searched. However, this is something that can be dealt with using a virtual directory through its LDAP proxy feature wherein it will only publish those applications searched by the user specifically.

1. Knowing More about LDAP Proxy
Most of the time, application designed
to Active Directory are not efficiently
written. For instance, a lot of these
applications are connecting at the root
of the AD forest when they may only
have to search one or two containers
in it. Aside from that, various
applications only require to view the
groups and users but they are actually
given access to view more than what
they are exactly looking for. The
reason for this is the lack of the ability
to control what is being searched.
However, this is something that can be
dealt with using a virtual directory
through its LDAP proxy feature
wherein it will only publish those applications searched by the user specifically.
This leads to having a more secure AD and enhanced performance for both the Active Directory
and application. In addition to such capability, there are also many other areas where the use
virtual directory becomes very helpful and beneficial to organizations. It can also authenticate
users regardless of where they may be residing—whether in LDAP directories, multiple Active
directories and SQL databases. Its feature known as STS or security token Service allows the
2-factor ADFS to authenticate the users in a simple way against the data stores besides the
Active Directory such as eDirectory, Sun and even databases.
Other benefits it can offer is it provides organizations with an ADFS deployment with additional
OOB authentication methods like the basic ones, SSO and the likes. It also features Denial of
Service prevention and provides the ability to perform dynamic claim augmentation with ease
without any custom coding using a graphical user interface of point and click. Virtual Dynamic
claims groups consist of standard role claims that can be designed according to the uses of the
incoming claim information.