LDAP Connection

Infisical supports the use of Simple Binding to connect with your LDAP provider.

Prerequisites

You will need the following information to establish an LDAP connection:

LDAP URL - The LDAP/LDAPS URL to connect to (e.g., ldap://domain-or-ip:389 or ldaps://domain-or-ip:636)
Binding DN/UPN - The Distinguished Name (DN), or User Principal Name (UPN) if supported, of the principal to bind with (e.g., ‘CN=John,CN=Users,DC=example,DC=com’)
Binding Password - The password to bind with for authentication
CA Certificate - The SSL certificate (PEM format) to use for secure connection when using ldaps:// with a self-signed certificate

Depending on how you intend to use your LDAP connection, there may be additional requirements:

Secret Rotation

For Password Rotation, the following requirements must additionally be met:

You must use an LDAPS connection
The binding user must either have:
- Permission to change other users passwords if rotating directory users’ passwords
- Permission to update their own password if rotating their personal password

Setup LDAP Connection in Infisical

Infisical UI
API

Navigate to the Integrations tab in the desired project, then select App Connections.
Select the LDAP Connection option.
Select the Simple Bind method option and provide the details obtained from the previous section and press Connect to Provider.
Your LDAP Connection is now available for use.

To create an LDAP Connection, make an API request to the Create LDAP Connection API endpoint.

Sample request

Request

curl    --request POST \
    --url https://app.infisical.com/api/v1/app-connections/ldap \
    --header 'Content-Type: application/json' \
    --data '{
        "name": "my-ldap-connection",
        "method": "simple-bind",
        "projectId": "7ffbb072-2575-495a-b5b0-127f88caef78",
        "credentials": {
            "provider": "active-directory",
            "url": "ldaps://domain-or-ip:636",
            "dn": "CN=John,CN=Users,DC=example,DC=com",
            "password": "<your-secure-password>",
            "sslRejectUnauthorized": true,
            "sslCertificate": "..."
        }
    }'

Sample response

Response

{
    "appConnection": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "name": "my-ldap-connection",
        "projectId": "7ffbb072-2575-495a-b5b0-127f88caef78",
        "version": 1,
        "orgId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "createdAt": "2023-11-07T05:31:56Z",
        "updatedAt": "2023-11-07T05:31:56Z",
        "app": "ldap",
        "method": "simple-bind",
        "credentials": {
            "provider": "active-directory",
            "url": "ldaps://domain-or-ip:636",
            "dn": "CN=John,CN=Users,DC=example,DC=com",
            "sslRejectUnauthorized": true,
            "sslCertificate": "..."
        }
    }
}

Automatic Credential Rotation

Infisical can automatically rotate the binding password of your LDAP connection on a recurring schedule. This is a single-phase rotation, meaning only one password exists at any given time. When a rotation occurs, the old password is replaced immediately.

Any external systems using the same binding credentials will lose access once a rotation completes. Make sure only Infisical relies on the rotated credentials.

When creating or editing your LDAP connection, toggle on the Automatic Credential Rotation switch and configure the rotation schedule. LDAP Automatic Credential Rotation

Rotation Interval - How many days between each rotation.
Rotate At - The local time of day at which the rotation will be triggered.

Laravel Forge Connection LiteLLM Connection

Getting Started

Platform Reference

Connectivity

Authentication Methods

Self-host Infisical

Internals

Contributing

Prerequisites

Setup LDAP Connection in Infisical

Sample request

Sample response

Automatic Credential Rotation

​Prerequisites

​Setup LDAP Connection in Infisical

​Sample request

​Sample response

​Automatic Credential Rotation

Prerequisites

Setup LDAP Connection in Infisical

Sample request

Sample response

Automatic Credential Rotation