Lightweight directory access protocol (LDAP) proxy

A computer system comprising:

• a processor;
• and
• memory coupled to said processor and having stored therein instructions that, if executed by said computer system, cause said computer system to execute operations comprising:
• receiving a BIND request from an identity manager, wherein said BIND request is for authenticating a user associated with a username to lightweight directory access protocol (LDAP) server, and wherein said BIND request comprises a password comprising a first factor security code and a second factor security code;
• stripping said second factor security code from said password;
• reconfiguring said BIND request with said password that is stripped of said second factor security code;
• forwarding said reconfigured BIND request to said LDAP server for authentication of said username using said first factor security code;
• performing authentication of said second factor security code;
• and
• positively authenticating said username to said LDAP server when said first factor security code and said second factor security code are authenticated with said username.

A computer-implemented method comprising:

• at a lightweight directory access protocol (LDAP) proxy server, receiving a BIND request from a client, wherein said BIND request is for authenticating a user associated with a username to an LDAP server, and wherein said BIND request comprises a password comprising a first factor security code and a second factor security code;
• stripping said second factor security code from said password;
• reconfiguring said BIND request with said password that is stripped of said second factor security code;
• forwarding said reconfigured BIND request to said LDAP server for authentication of said username using said first factor security code;
• performing authentication of said second factor security code;
• and
• positively authenticating said username to said LDAP server when said first factor security code and said second factor security code are authenticated in connection with said username.