When an LDAP Account document is configured with the Advanced fields "SSL" and "Send SSL certificates when asked" enabled, also enabling "Attempt authenticaton using SSL certs first" allows the client to authenticate with the LDAP server using the credentials supplied by the Internet certificate passed during SSL negotiations.