Hi, It is possible . i'm using Pam PTA to authenticate AD user from SSO application. it works perfectly. the configurationis SSO app +> 389 + SSSD -> AD As mentionned by Mark Reynolds use PAM PTA and filter with pamFilter . Contact me if you need more information. _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx