Can We do LDAP searching or editing?

[Nate Klingenstein]

Saurabh,

> I wanna ask , can I serach remote LDAP which is not accessible directly. 
> Remote LDAP is accessible to IDP only  and not to application.

Yes, of course, and this is the normal deployment pattern: an LDAP directory communicates directly only with the IdP.  The IdP then relays any attributes necessary and permitted to the SP.

> Can I serach the LDAP through SP/IDP and not accessing it directly using any
> API or any thing else.

The LDAP protocol kind-of is the "API".  That's the only interface the LDAP directory has with the IdP.

Thanks,
Nate.