If an enterprise application in Microsoft Entra needs to use LDAP to look up user attributes, Microsoft Entra Domain Services (Microsoft Entra DS) is typically required. Microsoft Entra DS provides a managed domain with LDAP functionality, allowing applications to query for user attributes within the Microsoft Entra environment.
Microsoft Entra ID (formerly Azure AD) does not natively support LDAP lookups for user attributes.
It primarily focuses on cloud-based authentication and authorization using protocols like OAuth
2.0 and OpenID Connect.
Microsoft Entra Domain Services bridges the gap.
It's a managed service that provides a Windows Server Active Directory-compatible environment, including LDAP, Kerberos, and NTLM authentication.
This allows legacy applications that rely on LDAP to integrate with Microsoft Entra.
Organizations can migrate their applications and infrastructure to the cloud without needing to refactor them to use modern authentication protocols.
Reference:
https://learn.microsoft.com/en-us/entra/architecture/auth-ldap