Pass Through Authentication to Active Directory
In many organizations, Active Directory server is central store of user attribute information, including password. Penrose can pass through credentials to Active Directory for password authentication. Penrose can do so without storing AD passwords in two locations as illustrated in the diagram below.
