On 6/3/20, 9:59 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote: * ldap:// with useStartTLS=true for LDAP+STARTTLS * ldap:// with useStartTLS=false for (plain) LDAP * ldaps:// for non-standard LDAP-over-SSL (useStartTLS irrelevant)? That’s my understanding. -- Scott