Off Site AD Authentication

I have a web application (not production) for which I want to enable AD authentication. The problem is that the DC is not mine, it is the client's. The site will be hosted remotely (amazon, rackspace or some other host). Can I enable the client's users to authenticate with their domain user?

They should be able to use the windows login credentials and if possible even input their user-password when accessing the applic开发者_如何学Cation.

I have maxed my googling skills on that one.

Thanks!

Doing this requires opening LDAPS on firewalls and securing it to a set of source IPs, generally. That's really not a great design and many companies (rightly) won't allow this. What you really want to look in to is federation ala Active Directory Federation Services (ADFS) or similiar.