The results are much better now! But it bugs me that the sink is .put(Context.PROVIDER_URL instead of the InitialDirContext constructor call. Could you please remove the side-conditions on the sink and additional taint step regarding SECURITY_PROTOCOL and SECURITY_AUTHENTICATION; instead, use a separate Configuration for each of them, and look for a sink which IS also a sink for SECURITY_AUTHENTICATION = simple AND PROVIDER_URL = ldap:// AND NOT SECURITY_PROTOCOL = ssl. It wouldn't warn in a case like:

Hashtable<String, String> env = new Hashtable<>();
setSSL(env);
env.put(Context.PROVIDER_URL, "ldap://blabla");
setBasicAuth(env);
userContext = new InitialLdapContext(env, null);