Available starting in AX-3.8, the LdapV3ADUserService supports LDAPv3 client access of Windows Active Directory (AD) server, and is also backwards-compatible with an LDAPv2 system. Authentication to the AD server can use either Kerberos (if LDAPv3) or else some other SASL (Simple Authentication and Security Layer) mechanism such as CRAM-MD5, DIGEST-MD5, or simple authentication.

Due to the popularity of Windows Server products with LDAPv3 capability, this may be the most frequently used of the NiagaraAX LDAP user services. Most key configuration properties are in its ActiveDirectoryConfig container, shown expanded in Figure 21 above. See ActiveDirectoryConfig (V3) for more details.