I'm pottering around the IdP docs and was wondering if there were any advantages in using the IdP on Windows for Active Directory authentication/attribute gathering:
as opposed to running the IdP on unix and using LDAP. Does it use LDAP in either configuration? Or is there another protocol it will use if it's in an AD domain?