[keycloak-user] High Availability, Active Directory LDAPS and Keycloak AD Federation

[Chris Smith]

When my LDAPS url  = ldaps://ad-dc-01.xxx-apps.com
My connection is successful and
my bind DN and credential successfully authenticate

When my LDAPS url = ldaps://xxx-apps.com
My connection is successful but
my bind DN and credential do not successfully authenticate.

The AD forest has 2 domain controllers, ad-dc-01 and ad-dc-02.
What is the proper LDAPS url for high availability AD federation?