LDAP is in the "SSO family", but definitely brings with it a lot of challenges. Chief among those is binding over the open Internet if you're a cloud app. It's

LDAP is in the "SSO family", but definitely brings with it a lot of challenges. Chief among those is binding over the open Internet if you're a cloud app. It's surprising just how many orgs are running unencrypted LDAP, which makes those environments unfit for authenticating apps outside of the company network. I'm not sure if I would classify LDAP as a middle ground though (rather, it's another tool in the toolbox) - it may be more challenging to implement as a software startup, and is often not viable depending on the customer environment. Not where I'd invest development capacity in 2022.