Simple definition
LDAP allows apps to search for users, groups and other information in a directory like Active Directory.
Technical definition
Lightweight Directory Access Protocol organizes objects in a tree and uses distinctive names, attributes and search filters. LDAP can be protected by TLS or used via LDAPS.
What is it used for ?
Application authentication, user search and directory synchronization.
Practical example
An internal application checks a user’s membership in an Active Directory group before granting access.
Common issues
- Incorrect DN base
- Filter LDAP invalid
- Liaison account without sufficient entitlements
- LDAPS certificate not approved
Related terms
Active Directory (AD) · Domain Controller · Kerberos · SSL/TLS certificate · MFA
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.