Has anyone come across a full-disk encryption alternative to FileVault 2 for macOS with better LDAP user support? I've been trying to identify a solution for macOS Mojave that:
- offers pre-boot, full-disk encryption just like FileVault 2 does
- allows users to type in a username and password from the pre-boot login screen, authenticate over the network to a local LDAP server, and then decrypt+login to a macOS system without being manually added as users on that system beforehand.
I'm working in an environment with thousands of constantly changing users across thousands of machines at different sites, so pre-adding each LDAP user to each system (as I understand FileVault 2 requires) isn't workable for me.
A question about FileVault alternatives hasn't been asked in some time. My search for an alternative meeting my needs hasn't turned up much, which is why I'm hoping someone in the community can help. Most tools I've found such as VeraCrypt, TrueCrypt, and Trend Micro EE only seem to offer directory-level encryption rather than pre-boot. I'm starting to become convinced FileVault 2 is the only pre-boot FDE option for macOS... does anyone know of another?