Whether to enable or disable this LDAP configuration.

The LDAP server to connect to such as ldap://ldap.your-org.com, ldaps://ldap.myorg.com:636 (for connection over SSL/TLS), etc.

The distinguished name of object to bind when performing the user search such as cn=infisical,ou=Users,dc=acme,dc=com

The password to use along with Bind DN when performing the user search.

The attribute to use as the unique identifier of LDAP users such as sAMAccountName, cn, uid, objectGUID. If left blank, defaults to uidNumber

The base DN to use for the user search such as ou=Users,dc=acme,dc=com

The template used to construct the LDAP user search filter such as (uid={{username}}) uses literal {{username}} to have the given username used in the search. The default is (uid={{username}}) which is compatible with several common directory schemas.

LDAP search base to use for group membership search such as ou=Groups,dc=acme,dc=com

The template used when constructing the group membership query such as (&(objectClass=posixGroup)(memberUid={{.Username}})). The template can access the following context variables: [UserDN, UserName]. The default is (|(memberUid={{.Username}})(member={{.UserDN}})(uniqueMember={{.UserDN}})) which is compatible with several common directory schemas.

The CA certificate to use when verifying the LDAP server certificate.

PEM-encoded client certificate presented during the TLS handshake for mutual TLS (mTLS). Must be provided together with clientKeyCertificate.

PEM-encoded private key matching the client certificate, used during the TLS handshake for mutual TLS (mTLS). Must be provided together with clientCertificate.

The ID of the organization to update the LDAP config for.