LDAP Integration – Is Password from AD or Local SDP?

Hi,

In a setup where LDAP (Active Directory) is configured in Cato for user provisioning only, and no SSO is in place:

- Is LDAP also used implicitly for authentication (LDAP bind)?
- Or is authentication handled locally by Cato (separate SDP credentials)?

There doesn’t seem to be a clear setting indicating LDAP auth vs provisioning-only.

Would like to confirm the expected login behavior.

Thanks.