Microsoft

Microsoft LDAP (Lightweight Directory Access Protocol) refers to integration with on-premises Active Directory Domain Services via LDAP protocol. Active Directory is the foundational identity service for most enterprise Windows environments, managing user authentication, group memberships, computer accounts, and group policies across the on-premises infrastructure. 

For security response actions, Microsoft LDAP integration enables containment of compromised on-premises Active Directory accounts by disabling users, forcing password changes, and performing user lookups. This is critical for incident response in hybrid environments where on-premises Active Directory remains the authoritative identity source for network resources, file shares, and legacy applications not yet migrated to the cloud. 

Supported Response Actions: 

• Disable User
• Enable User
• Change Password
• Change Password at Next Login
• Lookup Use