[keycloak-user] High Availability, Active Directory LDAPS and Keycloak AD Federation

When my LDAPS url = ldaps://ad-dc-01.xxx-apps.com My connection is successful and my bind DN and credential successfully authenticate When my LDAPS url = ldaps://xxx-apps.com My connection is successful but my bind DN and credential do not successfully authenticate. The AD forest has 2 domain controllers, ad-dc-01 and ad-dc-02. What is the proper LDAPS url for high availability AD federation?