---
title: "PATCH /api/v1/app-connections/ldap/{connectionId}"
method: PATCH
path: "/api/v1/app-connections/ldap/{connectionId}"
tags: ["App Connections"]
---

# PATCH /api/v1/app-connections/ldap/{connectionId}

`PATCH /api/v1/app-connections/ldap/{connectionId}`

Update the specified LDAP Connection.

## Path parameters

- `connectionId` string, uuid, required

## Request body

- object
  - `credentials` object — The credentials used to connect with LDAP.
    - `provider` 'active-directory', required — The type of LDAP provider. Determines provider-specific behaviors.
    - `url` string, required — The LDAP/LDAPS URL to connect to (e.g., 'ldap://domain-or-ip:389' or 'ldaps://domain-or-ip:636').
    - `dn` string, required — The Distinguished Name (DN) or User Principal Name (UPN) of the principal to bind with (e.g., 'CN=John,CN=Users,DC=example,DC=com').
    - `password` string, required — The password to bind with for authentication.
    - `sslRejectUnauthorized` boolean — Whether or not to reject unauthorized SSL certificates (true/false) when using ldaps://. Set to false only in test environments.
    - `sslCertificate` string — The SSL certificate (PEM format) to use for secure connection when using ldaps:// with a self-signed certificate.
  - `name` string — The updated name of the LDAP Connection. Must be slug-friendly.
  - `description` string, nullable — The updated description of the LDAP Connection.
  - `isPlatformManagedCredentials` false — Not supported for LDAP Connections.
  - `gatewayId` string, uuid, nullable — The Gateway ID to use for this connection.
  - `gatewayPoolId` string, uuid, nullable — The Gateway Pool ID to use for this connection.
  - `isAutoRotationEnabled` boolean — Whether or not automatic credential rotation is enabled for the LDAP Connection.
  - `rotation` object — The updated credential rotation configuration for the LDAP Connection.
    - `rotationInterval` integer — The interval in days between credential rotations.
    - `rotateAtUtc` object
      - `hours` integer, required — The hour (0-23) at which to rotate (UTC timezone).
      - `minutes` integer, required — The minute (0-59) at which to rotate (UTC timezone).

## Response `200`

Default Response

- object
  - `appConnection` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `version` number
    - `orgId` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `isPlatformManagedCredentials` boolean, nullable
    - `gatewayId` string, uuid, nullable
    - `projectId` string, nullable
    - `isAutoRotationEnabled` boolean
    - `gatewayPoolId` string, uuid, nullable
    - `rotation` object — The credential rotation configuration, if configured.
      - `lastRotationMessage` string, nullable — The message from the last rotation attempt.
      - `rotationInterval` number, required — The interval in days between credential rotations.
      - `nextRotationAt` string, date-time, nullable — The next scheduled rotation time.
      - `rotationStatus` 'success' | 'failed', required — The status of the last rotation attempt.
      - `rotateAtUtc` object, required — The UTC time of day at which rotation should occur.
        - `hours` number, required — The hour (0-23) at which to rotate.
        - `minutes` number, required — The minute (0-59) at which to rotate.
    - `credentialsHash` string
    - `project` object, nullable
      - `name` string, required
      - `id` string, required
      - `type` string, required
      - `slug` string, required
    - `app` 'ldap', required
    - `method` 'simple-bind', required
    - `credentials` object, required
      - `provider` 'active-directory', required — The type of LDAP provider. Determines provider-specific behaviors.
      - `url` string, required — The LDAP/LDAPS URL to connect to (e.g., 'ldap://domain-or-ip:389' or 'ldaps://domain-or-ip:636').
      - `dn` string, required — The Distinguished Name (DN) or User Principal Name (UPN) of the principal to bind with (e.g., 'CN=John,CN=Users,DC=example,DC=com').
      - `sslRejectUnauthorized` boolean — Whether or not to reject unauthorized SSL certificates (true/false) when using ldaps://. Set to false only in test environments.
      - `sslCertificate` string — The SSL certificate (PEM format) to use for secure connection when using ldaps:// with a self-signed certificate.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)