My customer( a charity org) wants to implement SSO. They are using LDAP with Active Directory(AD) for authentication for other applications.
They want Salesforce SSO integrated with LDAP.
However, can I recommend the customer to use federation authentication instead of delegation(LDAP) method?
The reason being it is straightforward to implement and less effort(no creating Web service with wsdl, getting delegation SSO activated by Salesforce etc).
So, even if they have an AD using LDAP for authentication, can Salesforce SSO work using federation method?