LDAP authentication requires Email Domain Verification.
You must verify your organization’s email domain before users can log in via LDAP.
LDAP is a paid feature.If you’re using Infisical Cloud, then it’s available under the Enterprise Tier. If you’re self-hosting Infisical,
then you should contact [email protected] to purchase an enterprise license to use it.
- Active Directory
- JumpCloud LDAP
- Google Workspace Secure LDAP
- AWS Directory Service
- Foxpass
FAQ
Why does Infisical require additional email verification for users connected via LDAP?
Why does Infisical require additional email verification for users connected via LDAP?
By default, Infisical Cloud is configured to not trust emails from external
identity providers to prevent any malicious account takeover attempts via
email spoofing. Accordingly, Infisical creates a new user for anyone provisioned
through an external identity provider and requires an additional email
verification step upon their first login.On a self-hosted instance, a server admin can skip this step by enabling Trust LDAP emails in the
Server Admin Console. This applies to
LDAP users in every organization on the instance.