Patent ID: 8555362

Claim:
A non-transitory computer-readable storage medium having computer-executable instructions for causing a computer system to perform operations comprising: at a lightweight directory access protocol (LDAP) proxy server at the computer system, receiving a BIND request from a client, wherein said BIND request is for authenticating a user associated with a username to an LDAP server, and wherein said BIND request comprises a password comprising a first factor security code and a second factor security code; stripping said second factor security code from said password; reconfiguring said BIND request with said password that is stripped of said second factor security code; forwarding said reconfigured BIND request to said LDAP server for authentication of said username using said first factor security code; performing authentication of said second factor security code; and positively authenticating said username to said LDAP server when said first factor security code and said second factor security code are authenticated in connection with said username.