My Oracle Support Banner

OUD11g/OUD12c - How to Configure Pass Through Authentication (PTA) Against Active Directory (AD) (Doc ID 1555227.1)

Last updated on DECEMBER 30, 2022

Applies to:

Oracle Unified Directory - Version and later
Information in this document applies to any platform.



This KM document explains how to configure OUD Pass Through Authentication (PTA) against Active Directory (AD).
The OUD version needs to be at least (i.e OUD R2PS2+)



 IMPORTANT NOTE - ACI flag configuration - POST OUD and OUD

When PTA is used with a local backend, set maintain-authenticated-users to true to get the ACI working.

dsconfig set-global-configuration-prop \
          --set maintain-authenticated-users:true

The flag maintain-authenticated-users is available since R2PS2 BP02 (i.e, and  R2PS3 BP01 (



To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.