Skip to main content

​
LDAP Authentication

Phoenix now supports authentication against LDAP directories, enabling integration with enterprise identity infrastructure including:
  • Microsoft Active Directory
  • OpenLDAP
  • 389 Directory Server
  • Any LDAP v3 compliant directory
Key Features:
  • Authenticate users with their corporate directory credentials
  • Automatic user provisioning on first login
  • Group-based role mapping (ADMIN, MEMBER, VIEWER)
  • Support for nested groups in Active Directory
  • Multi-server failover for high availability
  • TLS encryption with StartTLS and LDAPS support
  • Mutual TLS (client certificate) authentication
  • Custom CA certificate support for internal PKI
Configuration Highlights:
  • Simple setup with just PHOENIX_LDAP_HOST and PHOENIX_LDAP_USER_SEARCH_BASE
  • Flexible group-to-role mappings via JSON configuration
  • Support for both AD-style memberOf and POSIX group lookups
  • Optional immutable unique identifiers for user tracking

​
More Information in our documentation:

LDAP Authentication | Phoenix