Authentication Question

Hey everyone,

We are planning out a move from GW8/eDir to GW2014/AD.

A big thing for us is having pass through authentication on the desktops, the only way for that to work is by having AD as the user repository but not using it as the LDAP authentication source and using (blank) internal groupwise passwords instead.

How will this work from a Mobility standpoint? Will the users be able to use LDAP authentication (from AD) for the mobility server which will then be a trusted application back to the PO?