Our corporate security requirements have mandated that our ActiveDirectory servers use DIGEST-MD5 (SASL) as the authentication method.

I tested the connection with Apache Directory Studio as well as with Jenkins, and confirmed that this is not covered by LDAPS.