This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/website/docs/integrations/sources/ldap/index.md
Ernie 2a670afd02
Break down Sources into individual sections in Docs (#1052)
* Create index.mdx

Add Wekan example

* updated to include wekan entry

* Update and rename website/docs/sources.md to website/docs/sources/index.md

Break Sources into individual pages.

* Update and rename website/docs/sources/index.md to website/docs/sources/ldap/index.md

* Create index.md

* Update index.md

* Update index.md

* Create index.md

* Create index.md

* Create index.md

* Update index.md

* Update index.md

* Update index.md

* Create index.md

* discord images

* spacing

* Added discord

* discord changes

* Added sources breakdown to the sidebar

* Fixed the saml title

* Added github examples

* fixed formatting

* Changed file path, updated sidebar, added google.

* fixed a spelling mistake

* Cleaned up formatting

* Fixed Notes
2021-06-22 21:46:44 +02:00

1.7 KiB

title
LDAP

Sources allow you to connect authentik to an existing user directory. They can also be used for social logins, using external providers such as Facebook, Twitter, etc.

LDAP Source

This source allows you to import users and groups from an LDAP Server.

:::info For Active Directory, follow the Active Directory Integration :::

  • Server URI: URI to your LDAP server/Domain Controller.
  • Bind CN: CN of the bind user. This can also be a UPN in the format of user@domain.tld.
  • Bind password: Password used during the bind process.
  • Enable StartTLS: Enables StartTLS functionality. To use LDAPS instead, use port 636.
  • Base DN: Base DN used for all LDAP queries.
  • Addition User DN: Prepended to the base DN for user queries.
  • Addition Group DN: Prepended to the base DN for group queries.
  • User object filter: Consider objects matching this filter to be users.
  • Group object filter: Consider objects matching this filter to be groups.
  • User group membership field: This field contains the user's group memberships.
  • Object uniqueness field: This field contains a unique identifier.
  • Sync groups: Enable/disable group synchronization. Groups are synced in the background every 5 minutes.
  • Sync parent group: Optionally set this group as the parent group for all synced groups. An example use case of this would be to import Active Directory groups under a root imported-from-ad group.
  • Property mappings: Define which LDAP properties map to which authentik properties. The default set of property mappings is generated for Active Directory. See also LDAP Property Mappings