Penrose supports using Active Directory as a data source via its LDAP interface. Penrose does not support Windows specific protocols or API. Penrose does not support Kerberos authentication against Active Directory. Penrose does not support authentication using Windows principal name (non-DN format).