I'm not seeing this anywhere and it doesn't look like it's supported in the Identity Stores screen when choosing Active Directory. Looks like the only option is LDAP with clear text user passwords going over the network. Kind of funny since there is a secret key used to encrypt the database info for data at rest but nothing to encrypt passwords heading over to an AD domain controller?
Ben