So when I was configuring SSO for VSphere I came across some issues.

Some users can’t login and others can

Using the default port of 389 some users could login but others could not.
I could see all users login information and add them to groups but they got an error when logging in:

[code lang=text]
The authentication server returned an unexpected error:
ns0:RequestFailed: Referral. The error may be caused by a malfunctioning identity source.
[/code]

How to fix the error

When the port was changed to 3268 every thing started working.

But I want to use SSL (ldaps)

The standard port for LDAPS is 636 but again this did not work for some users.

Once I changed to 3269 it worked using LDAPS

Example line

[code lang=text]
ldaps://:3269
[/code]

References

https://arstechnica.com/civis/viewtopic.php?t=397683