SourceIdentityLDAP
Collects on-prem source identities (objectSid + ms-DS-ConsistencyGuid/objectGUID + UPN)
What it does
Unlike ActiveDirectoryDiscovery (V1/V2), which uses the RSAT ActiveDirectory module (Get-ADUser - requires a domain-joined / DNS-resolvable context), this module binds raw LDAP via System.DirectoryServices.Protocols with an EXPLICIT DC endpoint + per-domain credentials. That makes it work against: - isolated lab DCs reachable only by IP, - non-domain-joined collector hosts, - cross-FOREST source domains that must use a SIMPLE bind (Negotiate referral hangs). Output feeds the already-built SID-map generator (appliance/identity/sidMapGenerator.ts) via the appliance:identity:plan seam.
How the app exposes it
The module runs through the ACQI discovery orchestrator and writes its rows into a dedicated results view. From there, conflicts, dependencies, and readiness scores feed the deal-wide consolidation layer.
/discovered/source-identity-ldap Outputs
Each module emits a normalised CSV keyed by entity ID with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact column set varies by module — the app's results view shows the live schema.