The various LDAP plugins (Provisioner, Org Identity Source, Identifier Validator) have a lot of duplicate code, especially around querying the LDAP server, verifying that it is available, localization texts, and managing configurations. Consider pulling these functions into a separate location (util?), and possibly even defining LDAP servers at the CO level (which plugins could then reference).