I agree with the OP here, this is ambiguous. The documentation does suggest it's mandatory to use LDAP, but if that is the case why does the configuration allow you to have LDAP checks turned off when certificate authentication is enabled? It's either poor documentation, or poor UI checks. ... View more