Change Active Directory to LDAP

Owned by Phillip Hanegan
Feb 29, 2024
1 min read

If you have already created an Active Directory account store and realize that you need for it to be a secure LDAP account store, you can change it using a stored procedure in the database that is not exposed in any workflow.

You can see all of EmpowerID's stored procedures in Microsoft SQL Server Management Studio in the Object Explorer by expanding Databases, then EmpowerID, then Programmability, then Stored Procedures.

Stored Procedure: Custom_AccountStore_TransformToSecure

Parameters: 

  • @AccountStoreID (smallint, Input, No default)

  • @PortOverwrite (int, Input, Default)

Returns: integer

Run the stored procedure

  1. Open Microsoft SQL Server Management Studio and connect to your server.

  2. In the Object Explorer, expand Databases and click EmpowerID.

  3. In the toolbar, click New Query.

  4. Enter the following query (changing the AccountStoreID value to the value of your Active Directory account store), and in the toolbar, click Execute.

    EXEC EmpowerID.dbo.Custom_AccountStore_TransformToSecure @AccountStoreID = 7

  5. Once you get the message that the procedure executed successfully, you can view the Account Store Details page for the account store to verify that these two attributes have updated:

    • The Use Secure Binding property is selected

    • The Fully Qualified Name has a secure port, e.g. mydomain.com:636

Â