> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/settings/ldap.md).

# LDAP

You can integrate `FSProtect` with your `Active Directory` or other `LDAP` server to make the authentication process easier.

The `LDAP Authentication Configuration` consists of two configuration requirements ;

* **LDAP Connection Configuration**
* **Access Control Settings**

<figure><img src="/files/YJaiW1ZfJm4ntxIL4Wa7" alt=""><figcaption><p>LDAP Authentication Settings</p></figcaption></figure>

## **Configuring the LDAP Connection**

You need to configure an LDAP connection with the parameters below.

**Status:** Status of the LDAP connection setting.

**Protocol:** LDAP protocol type, `LDAP` or `LDAPS`.

**Domain Controller IP Address:** IP Address of Domain Controller or LDAP server.

**Port:** Port number of the LDAP protocol, `389` or `636` by default.

**Search Base:** Distinguished name of the base container object, `Domain`, `Organizational Unit` or `Container`.

**User Name:** Netbios formatted Username field to test LDAP connection.

**Password:** Password field to test LDAP connection.

<figure><img src="/files/CyhfAwvA0g3F9dVXD7F3" alt=""><figcaption><p>Configuring the LDAP Connection</p></figcaption></figure>

## **Configuring Access Control Settings**

After successfully establishing the LDAP connection, you should define the `Users` and `Groups` that can log in to the FSProtect with LDAP.

You can create Access Control entries with the parameters below.

**Account Type:** Type of account can log in to the FSProtect, `User` or `Group`. If the Group option is selected, recursive members of this group can log in to the FSProtect.

**Distinguished Name:** Distinguished Name of the account.

**Security Identifier:** Security Identifier (SID / objectSid) of the account.

**Privilege:** Privilege level of the account, `User (Read-Only)` or `Admin`.

<figure><img src="/files/9DIYE6DMOQvluSc6BtIX" alt=""><figcaption><p>Configuring the Access Control Settings</p></figcaption></figure>

After these configurations, you can log in to the FSProtect with Netbios formatted username and password.

<figure><img src="/files/ONd3AmRQoN0QYIKqIO5Q" alt=""><figcaption><p>Logging in with LDAP</p></figcaption></figure>