{"id":3535,"date":"2021-08-11T13:40:00","date_gmt":"2021-08-11T17:40:00","guid":{"rendered":"http:\/\/www.jumpcloud.com\/blog\/?p=3535"},"modified":"2023-05-02T11:25:15","modified_gmt":"2023-05-02T15:25:15","slug":"what-is-ldap","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/what-is-ldap","title":{"rendered":"What Is LDAP? The Ultimate Guide"},"content":{"rendered":"\n<p>For nearly 3 decades, organizations have been using the LDAP (Lightweight Directory Access Protocol) for user management, attributes, and authentication. In that time, the protocol has expanded and evolved to meet changing IT environments and business needs.<\/p>\n\n\n\n<p>This post covers everything you need to know about LDAP, from its origins to its place in the contemporary cloud-driven world. We\u2019ll also take a dive into explaining how it works, how it\u2019s used, how to get started, and which<a href=\"https:\/\/jumpcloud.com\/blog\/choosing-ldap-server\"> LDAP server<\/a> solutions might be right for your needs.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ldap-protocol\">What Is The LDAP Protocol?<\/h2>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/H4vBoGEGy-U?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<p>To understand what LDAP is, it\u2019s best to understand what it was used for in the first place: directory services.<\/p>\n\n\n\n<p>Directory services securely manage users and their access rights to IT resources within an organization using certain protocols.&nbsp;<\/p>\n\n\n\n<p>LDAP is one of the core protocols used for these services. Although directory services may use additional protocols like Kerberos, SAML, RADIUS, SMB, Oauth et.c., most still use LDAP today.<\/p>\n\n\n\n<p>In a nutshell, LDAP enables the secure management of users and IT resources in a directory, making it possible to control access to different parts of a computer network.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">History of LDAP&nbsp;<\/h3>\n\n\n\n<p><a href=\"https:\/\/www.openldap.org\/pub\/umich\/ldap.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">LDAP was developed in 1993<\/a> by Tim Howes and his colleagues at the University of Michigan. It was created to be a lightweight, low-overhead version of the X.500 directory services protocols used at the time, such as directory access protocol (DAP).\u00a0<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/05\/1.1.png\" alt=\"\" class=\"wp-image-63303\" width=\"709\" height=\"266\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/1.1.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/1.1-300x113.png 300w\" sizes=\"(max-width: 709px) 100vw, 709px\" \/><\/figure>\n\n\n\n<p>X.500 had a large bandwidth-intensive footprint, making it strenuous for both the systems and the network. Little wonder that most computers on people\u2019s desks in the early 1990s couldn\u2019t connect to an X.500 directory service.&nbsp;<\/p>\n\n\n\n<p>Consequently, in those days, X.500\u2019s usage was limited to specific systems like mainframes, mini-computers, or micro-computers, and generally not PCs.<\/p>\n\n\n\n<p>LDAP solved these problems by allowing for authentication and authorization of users to IT resources while reducing overhead, bandwidth use, and demand on endpoints. Due to these efficiencies, LDAP found great success and became the de facto Internet directory services authentication protocol in no time.&nbsp;<\/p>\n\n\n\n<p>LDAP version 3 was proposed and accepted as the internet standard for directory services in the late nineties. This remains the latest and most prevalent version of LDAP today.<\/p>\n\n\n\n<p>Following this milestone, Kurt Zeilenga started the OpenLDAP Project by releasing<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-openldap\"> OpenLDAP<\/a> 1.0 in 1998. This version included advanced security features, updated platform support, and bug fixes. It was also the first entirely open-source suite of client and server applications derived from LDAPv3.3.&nbsp;<\/p>\n\n\n\n<p>Amongst other factors, OpenLDAP also enjoyed popularity because it enabled IT admins to modify it to fit their organizations\u2019 needs better.<a href=\"https:\/\/www.symas.com\/symas-about\" target=\"_blank\" rel=\"noreferrer noopener\"> Howard Chu and the Symas team<\/a> have continued to drive OpenLDAP&#8217;s development since 1999.<\/p>\n\n\n\n<p>Also in 1999, Microsoft released Active Directory, which used LDAP and Kerberos while creating proprietary extensions to keep organizations locked into the Microsoft ecosystem.<\/p>\n\n\n\n<p>LDAP has since significantly impacted the evolution of directory services and has become an essential component of modern IT infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-does-ldap-work\"><strong>How Does LDAP Work?&nbsp;<\/strong><\/h2>\n\n\n\n<p>LDAP works by specifying a method of directory storage that allows for adding, deleting, and modifying records. It also enables the search of those records to facilitate both authentication and authorization of users to resources.&nbsp;<\/p>\n\n\n\n<p>LDAP\u2019s three main functions are:<\/p>\n\n\n\n<ul>\n<li><strong>Update: <\/strong>This includes adding, deleting, or modifying directory information.<\/li>\n\n\n\n<li><strong>Query:<\/strong> This includes searching and comparing directory information.<\/li>\n\n\n\n<li><strong>Authenticate:<\/strong> The main authentication functions include binding and unbinding; a third function, abandon, can stop a server from completing an operation.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>LDAP Directory Components<\/strong><\/h3>\n\n\n\n<p>When working with an<a href=\"https:\/\/jumpcloud.com\/blog\/identity-provider-idp\"> identity provider (IdP)<\/a>, much of LDAP\u2019s operations happen behind a graphical user interface (GUI). Nonetheless, it is helpful to know its components to round out your understanding and help with customization or troubleshooting down the road.<\/p>\n\n\n\n<p>Plus, although OpenLDAP allows for flexible customization, it requires more intricate knowledge of the protocol and its use cases. Especially as changes are generally made using the command line, configuration files, or, sometimes, by modifying the open-source code base.<\/p>\n\n\n\n<p>The following are some of the key elements and concepts of the LDAP protocol and LDAP-based directory:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>LDAP Directory Information Tree<\/strong><\/h4>\n\n\n\n<p>LDAP organizes information in a hierarchical tree structure called a directory information tree (DIT). The DIT can vary based on the software or directory service you use.&nbsp;<\/p>\n\n\n\n<p>Generally, though, LDAP directories follow a tree structure where entries without subordinates\u2014users, for example\u2014are leaves. At the same time, the root is the overarching entity encompassing all the information within the directory.<\/p>\n\n\n\n<p>The root is a directory server agent specific entry, also called the root DSE, and it provides information about the directory.<\/p>\n\n\n\n<p>Above is a highly simplified example of an LDAP directory information tree (DIT). There can only be one root, but the branches can be iterative and groups can nest. The leaves\u2014users and printers in the above diagram\u2014 have attributes, but they cannot have subordinate entities.&nbsp;<\/p>\n\n\n\n<p>LDAP directories can contain entries for users, groups, printers, servers, applications, and more.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"692\" height=\"325\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/05\/2.1.png\" alt=\"\" class=\"wp-image-63305\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/2.1.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/2.1-300x141.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><figcaption class=\"wp-element-caption\">Above is a highly simplified example of an LDAP directory information tree (DIT). There can only be one root, but the branches can be iterative and groups can nest. The leaves (users and printers, in this diagram) have attributes, but they cannot have subordinate entities. LDAP directories can contain entries for users, groups, printers, servers, applications, and more.&nbsp;<\/figcaption><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Entry<\/strong><\/h4>\n\n\n\n<p>Entries use attributes to describe the real-world items stored in the directory, like a user or a machine. Just as you&#8217;ll find in a phone book, or perhaps, your phone&#8217;s contact list, users in a DIT exist as entries, which store additional information about the user.<\/p>\n\n\n\n<p>In LDAP, entries are often referred to by their common name (CN). For users, this common name is usually their username or first and last name.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Attribute<\/strong><\/h4>\n\n\n\n<p>Attributes describe a user, server, or other item stored in the LDAP directory. A user\u2019s attributes, for starters, would typically include their full name, email address, username, and password. Attributes are made up of a type and a value; i.e.,<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>mail(type)=pgibbons@initech.com(value)<\/p>\n<\/div><\/div>\n\n\n\n<p>The available attributes to include are predefined by an ObjectClass attribute. Organizations may use more than one ObjectClass attribute and create custom ObjectClass attributes to contain the information they want to store in their LDAP directory.&nbsp;<\/p>\n\n\n\n<p>Note that there can only be one structural object class per entry. While additional auxiliary object classes may exist, the structural object class defines each entry.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Schema<\/strong><\/h4>\n\n\n\n<p>Schemas define the directory. Specifically, a schema defines the parameters of the directory, including syntax, attribute types, object classes, and matching rules (e.g., whether the input password matches the directory data).<\/p>\n\n\n\n<p>LDAP V3. offers a predefined schema, and other LDAP offerings provide schema variants or iterations. Therefore, different providers may format their LDAP directories differently. Creating a custom schema is also possible for more nuanced and niche use cases.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>DN: Distinguished Name<\/strong><\/h4>\n\n\n\n<p>This is the unique identifier for an LDAP entry, specifying all the attributes assigned to the object. It can contain multiple data points and comprises relative distinguished names (<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#rdn\">RDNs<\/a>) in a string separated by commas.<\/p>\n\n\n\n<p>The DN format works like geographic coordinates, only in reverse order: it specifies the location in the directory by listing each subsection in increasing degrees.<\/p>\n\n\n\n<p>While geographic coordinates start general and get more specific, the DN starts with the object\u2019s name and works up to the main directory component\u2014your LDAP server\u2019s domain, for example\u2014forming a complete address pointing to the entry\u2019s location in the LDAP tree.<\/p>\n\n\n\n<p>DNs are formatted as follows:<\/p>\n\n\n\n<p class=\"has-text-align-center\">RDN,RDN,RDN<\/p>\n\n\n\n<p class=\"has-text-align-left\">For Peter Gibbons, a programmer in the IT department at Initech, the DN may look like this:<\/p>\n\n\n\n<p class=\"has-text-align-center\"><code>cn=Peter Gibbons,ou=IT,ou=People,dc=Initech,dc=com<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"692\" height=\"220\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/05\/3.1.png\" alt=\"\" class=\"wp-image-63306\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/3.1.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/3.1-300x95.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><figcaption class=\"wp-element-caption\">For Peter Gibbons, a programmer in the IT department at Initech, the DN may be formatted as cn=Peter Gibbons,ou=IT,ou=People,dc=Initech,dc=com<\/figcaption><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"RDN\"><strong>RDN: Relative Distinguished Name<\/strong>&nbsp;<\/h4>\n\n\n\n<p>These are strings that assign values to attributes, like assigning an email address to a user. They are formed with an equal sign (=) in name-value pairs. The format looks as follows:<\/p>\n\n\n\n<p class=\"has-text-align-center\">attribute=value<\/p>\n\n\n\n<p>\u00a0For example, the RDN for user Peter Gibbons\u2019 email address may be <code>mail=pgibbons@initech.com<\/code><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"692\" height=\"250\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/05\/4.1.png\" alt=\"\" class=\"wp-image-63307\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/4.1.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/4.1-300x108.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><\/figure><\/div>\n\n\n<h3 class=\"wp-block-heading\"><strong>Multivalue RDNs<\/strong><\/h3>\n\n\n\n<p>RDNs can be combined into an overarching RDN with plus signs. Multivalue RDNs treat two attribute values as one, and can be used to differentiate between two RDNs with the same value.&nbsp;<\/p>\n\n\n\n<p>For example, in an instance of two users having the same name, the directory could attach the RDN for their email address to their username to create unique RDNs for each. A multivalue RDN would be formatted as follows:<\/p>\n\n\n\n<p class=\"has-text-align-center\">RDN+RDN<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"692\" height=\"300\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/05\/5.1.png\" alt=\"\" class=\"wp-image-63308\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/5.1.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/5.1-300x130.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><figcaption class=\"wp-element-caption\">This indicates that this is Peter Gibbons in the IT department (differentiating from anyone else in another department with the same name).<\/figcaption><\/figure><\/div>\n\n\n<h3 class=\"wp-block-heading\"><strong>LDAP Servers&nbsp;<\/strong><\/h3>\n\n\n\n<p>An LDAP directory can contain one or more servers, but there must be one root server (the root DSE in the diagram above). Main LDAP servers run on the<a href=\"http:\/\/umich.edu\/~dirsvcs\/ldap\/doc\/guides\/slapd\/1.html\" target=\"_blank\" rel=\"noreferrer noopener\"> stand-alone LDAP daemon<\/a> (slapd) and they send changes to server replicas via the<a href=\"http:\/\/umich.edu\/~dirsvcs\/ldap\/doc\/guides\/slapd\/1.html\" target=\"_blank\" rel=\"noreferrer noopener\"> stand-alone LDAP update replication daemon<\/a> (slurpd).<\/p>\n\n\n\n<p>Traditionally, LDAP servers were hosted on-prem and managed by the organization internally, and Microsoft AD was the most popular commercial solution for LDAP on the market.&nbsp;<\/p>\n\n\n\n<p>OpenLDAP is the most popular open-source and pure-play LDAP server available today. Now however, organizations are more often using cloud-hosted directory services that relieve the burden of internal server hosting, security, and management.&nbsp;<\/p>\n\n\n\n<p>Cloud-based LDAP servers also enable organizations to shift their infrastructure to the cloud, take advantage of remote work opportunities, and decrease costs. See the<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#ldap-and-ad\"> LDAP and Active Directory<\/a> section in this article to learn more.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>LDAP Authentication and Authorization<\/strong><\/h3>\n\n\n\n<p>The LDAP protocol both authenticates and authorizes users to their resources. The protocol authenticates users with a bind operation that allows the user to communicate with an LDAP directory, then authorizes the authenticated user to the resources they need if their input login information matches what\u2019s listed for them in the database.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>How LDAP Authentication Works<\/strong><\/h4>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap-authentication\">LDAP authentication<\/a> relies on a client\/server bind operation. This operation allows the LDAP-ready client, also called the directory user agent (DUA), to communicate with the directory server, also called the directory system agent (DSA), in a secure, encrypted session.<\/p>\n\n\n\n<p>When authenticating against an LDAP server to access the database, the user is prompted to provide their username and password.<\/p>\n\n\n\n<p>If the values the user inputs into the client match what is found in the LDAP database, the LDAP server grants the user access to whatever the IT resource may be.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>How LDAP Authorization Works<\/strong><\/h4>\n\n\n\n<p>Once a user is successfully authenticated, they need to be authorized to access the resource(s) requested. While different LDAP instances may structure and encode this process slightly differently, it is essentially accomplished by assigning permissions with groups and roles in the directory.<\/p>\n\n\n\n<p>With OpenLDAP, for example, users belong to groups that can be assigned different permissions. If the authenticating user is assigned the correct permissions to access a certain resource, the LDAP protocol will authorize them to it; if not, the protocol will deny access.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ldap-use\"><strong>What Is LDAP Used For?<\/strong><\/h2>\n\n\n\n<p>The LDAP protocol defines a directory that can:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Store user data in one central and accessible location.<\/li>\n\n\n\n<li>Associate those users with resources they are allowed to access.<\/li>\n\n\n\n<li>Authenticate and authorize users to their assigned resources, which include:\n<ul>\n<li><strong>Technical Applications: <\/strong>Jenkins, Docker, OpenVPN, the Atlassian suite, and many others authenticate best with LDAP.&nbsp;<\/li>\n\n\n\n<li><strong>Server Infrastructure<\/strong>: Linux servers, both on-prem and in the cloud (like AWS), leverage LDAP to authenticate users. Learn more in<a href=\"https:\/\/jumpcloud.com\/blog\/aws-ldap-integration\"> Can I Integrate AWS With LDAP?<\/a><\/li>\n\n\n\n<li><strong>File Servers<\/strong>: File servers like QNAP, Synology, and FreeNAS support LDAP.<\/li>\n\n\n\n<li><strong>Networking Equipment<\/strong>: Though this can overlap with the RADIUS protocol, some organizations use LDAP for network access via VPNs, WiFi access points, and other networking equipment.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>Back in LDAP\u2019s early days, its functions were far more sophisticated than other options available. As the protocol gained popularity, more IT resources became LDAP-compatible. New offerings such as cloud LDAP, other authentication protocols, and full directory services also entered the scene to support access to those resources.<\/p>\n\n\n\n<p>Now, IT admins can<a href=\"https:\/\/jumpcloud.com\/blog\/ldap-use-cases\"> use LDAP<\/a> to authenticate machines and manage access to legacy applications, networks, NAS, and other components both on-prem and in the cloud. With cloud directory services like JumpCloud, they can combine this functionality with other protocols to provide users access to virtually all their IT resources.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>LDAP and Active Directory: What\u2019s The difference?<\/strong><\/h3>\n\n\n\n<p>As LDAP became a core directory services protocol, Microsoft AD built many of its underpinnings on LDAP; however, AD is not a pure LDAP tool.<\/p>\n\n\n\n<p>While AD can use LDAP, it relies more heavily on Kerberos for authentication and is less flexible than an open-source LDAP directory. AD requires domain controllers and works best with Microsoft Windows-based devices and applications. <em>Explore these differences further in our<\/em><a href=\"https:\/\/jumpcloud.com\/blog\/difference-between-ldap-openldap-active-directory\"><em> <\/em><em>AD vs. LDAP comparison<\/em><\/a><em>.<\/em><\/p>\n\n\n\n<p>Until recently, directory tools predominantly catered to on-prem Windows-based environments. AD\u2019s success came largely from its focus on Windows-centric, on-prem environments, which were the business standards for decades.&nbsp;<\/p>\n\n\n\n<p>However, this past decade\u2019s transition to the cloud, which accelerated with the pandemic-driven mass shift to remote work in 2020, changed the world\u2019s directory needs.<\/p>\n\n\n\n<p>Companies are now opting for cloud-based, Mac and Linux friendly directory services in place of AD and other on-prem directory models.&nbsp;<\/p>\n\n\n\n<p><em>Skip to the section on<\/em><a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#ldap-in-cloud\"><em> <\/em><em>LDAP\u2019s Place in the Cloud<\/em><\/a><em> to read more about how LDAP solutions have evolved to accommodate these changes<\/em>.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>LDAP and Azure Active Directory&nbsp;<\/strong><\/h3>\n\n\n\n<p>Azure Active Directory is a cloud-friendly add-on to AD that enables Azure user management and web application single sign-on. Azure Active Directory does not use LDAP natively, instead, it uses other protocols, and it facilitates LDAP functions with Azure AD Domain Services (DS) or a hybrid AD environment where LDAP is necessary.<\/p>\n\n\n\n<p>Azure AD DS is billed as a domain controller-as-a-service for virtual machines and Windows legacy applications deployed within Azure. It\u2019s charged per hour, and the price is based on the number of directory objects.<\/p>\n\n\n\n<p>For organizations that use LDAP with Azure AD, especially in an on-prem environment, it can be quite a tricky balancing act. This explains why many IT organizations opt to deploy an additional LDAP server in the cloud.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ldap-in-cloud\">LDAP\u2019s Place in the Cloud<\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"692\" height=\"355\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/05\/6.1.png\" alt=\"\" class=\"wp-image-63309\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/6.1.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/05\/6.1-300x154.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><\/figure><\/div>\n\n\n<p>Recent shifts to the cloud, coupled with disparate workplaces, have created the need for flexible directory solutions that work with cloud resources. It is also important that these solutions are built to accommodate different operating systems. This is especially as at least<a href=\"https:\/\/www.computerworld.com\/article\/3562374\/mac-adoption-in-enterprise-grows-survey-says.html\" target=\"_blank\" rel=\"noreferrer noopener\"> 55% of businesses are now Mac-friendly<\/a>, and<a href=\"https:\/\/hostingtribunal.com\/blog\/linux-statistics\/\" target=\"_blank\" rel=\"noreferrer noopener\"> 90% of the world\u2019s cloud infrastructure operates on Linux<\/a>.<\/p>\n\n\n\n<p>The implication of this is that AD\u2019s Microsoft Windows and an Azure-centric approach is no longer viable for many businesses with OS-diverse environments. This has led them to resort to relying on additional integrated solutions to manage their growing infrastructure; particularly cloud LDAP and Directory-as-a-Service.<\/p>\n\n\n\n<p>Cloud LDAP relieves companies of a great deal of directory management burden. This ranges from setting up and maintaining the core directory infrastructure to integrating applications and systems into their LDAP-based IdP. With cloud LDAP, the servers are primed and ready for businesses to direct their LDAP-connected endpoints to them.<\/p>\n\n\n\n<p>Cloud directory services also tend to use other protocols as well. This widens their scope and positions them to accommodate emerging technologies. This ultimately eliminates the need for an on-prem Active Directory server.<\/p>\n\n\n\n<p>Some cloud LDAP services also include a GUI and technical support where needed, eliminating the need to execute all operations with plain-text code. Nonetheless, some directory services still provide the option for command-line execution which are super helpful for bulk operations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"is-ldap-still-relevant\"><strong>Is LDAP Still Relevant?<\/strong><\/h2>\n\n\n\n<p>If directories are moving toward the cloud and LDAP was built to work in an on-prem environment, is<a href=\"https:\/\/jumpcloud.com\/blog\/ldap-dead\"> LDAP still relevant?<\/a><\/p>\n\n\n\n<p>With cloud applications becoming the business standard, IT networks have become more decentralized, and new protocols have being developed to meet these evolving needs. Naturally, these have led system administrators to question LDAP\u2019s relevance in contemporary times.<\/p>\n\n\n\n<p>LDAP is, however, still very relevant, given that directories have begun to adopt multi-protocol approaches to address modern, decentralized business environments. A multi-protocol directory leverages many protocols\u2014each for a specific purpose.<\/p>\n\n\n\n<p>The result is that each protocol is less frequently used but is highly suited to its use cases and remains a critical component of a robust multi-protocol directory.<\/p>\n\n\n\n<p>LDAP is no exception; while it makes up a smaller percentage of the directory\u2019s functionality than older directory models, it remains an integral part of the modern directory.<\/p>\n\n\n\n<p>Multi-protocol directory services continue to use LDAP alongside other protocols because of its flexibility, open-source heritage, and stability over the years.<\/p>\n\n\n\n<p>For example, many legacy applications like OpenVPN, Jenkins, MySQL, Jira, and Confluence\u2014 along with several other applications, storage systems, networking devices, servers, et.c.\u2014continue<a href=\"https:\/\/jumpcloud.com\/blog\/ldap-use-cases\"> to use LDAP<\/a>.<\/p>\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/01\/men-collaborating-with-laptop-aspect-ratio-160-110.jpg\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            Pricing Options for Every Organization        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            Packages and A La Carte Pricing        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/pricing\" data-promo=\"Explore Pricing\" class=\"button is-primary-green promo-small-banner-link\">Explore JumpCloud Pricing<\/a>\n    <\/div>\n<\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-to-set-up-ldap\">How To Set Up LDAP<\/h2>\n\n\n\n<p>LDAP setup steps vary depending on which LDAP offering you\u2019re using, and steps will largely depend on whether you\u2019re using a cloud LDAP server or setting one up on your own.<\/p>\n\n\n\n<p>Before starting down either path, however, the first step to any LDAP implementation should be planning: your IT team should think carefully about how it wants to organize its directory before implementing anything.<\/p>\n\n\n\n<p>This thinking should consider the following:<\/p>\n\n\n\n<ul>\n<li>which resources to include in the directory<\/li>\n\n\n\n<li>how to separate user groups, allocate permissions<\/li>\n\n\n\n<li>operating systems you\u2019ll need to accommodate<\/li>\n\n\n\n<li>how do you plan to integrate remote workers<\/li>\n\n\n\n<li>what your security parameters will be<\/li>\n\n\n\n<li>what you will do to ensure near 100% uptime<\/li>\n\n\n\n<li>how your organization plans to scale, and lots more.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Initial planning is critical to building an organized, scalable, flexible, and well-suited directory to its environment. For example, if you\u2019re an organization of 10 but plan to expand significantly, it might make sense to divide your employees into departmental groups at the outset. This allows for organized growth, even if each department starts with only one or two users.&nbsp;<\/p>\n\n\n\n<p>Planning is also critical for organizations building their directories because it helps them understand which LDAP solutions best meet their needs.&nbsp;<\/p>\n\n\n\n<p>After planning your directory layout and choosing an LDAP provider (or opting for open-source LDAP), you must configure your LDAP servers.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">On-Prem LDAP Setup:&nbsp;<\/h3>\n\n\n\n<p>If you\u2019re hosting your own LDAP instance, you must stand up your LDAP server(s). The steps to installing and configuring your LDAP directory will vary depending on the LDAP instance you use. OpenLDAP is perhaps the most popular LDAP instance on the market, but there are other LDAP servers to choose from, such as Apache DS, 389 DS, and Open DJ.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Cloud LDAP Setup:<\/h3>\n\n\n\n<p>As mentioned earlier, cloud LDAP setup and maintenance are minimal. This is a major reason many companies choose it over traditional on-prem options. The server step for cloud LDAP involves subscribing to a cloud LDAP server rather than standing it up yourself.&nbsp;<\/p>\n\n\n\n<p>You\u2019ll still want to plan carefully before choosing an LDAP solution. Still, most providers offer directory configuration and management via a user-friendly GUI that makes modifications easier.&nbsp;<\/p>\n\n\n\n<p>While there aren\u2019t many<a href=\"https:\/\/jumpcloud.com\/blog\/free-ldap-server\"> free LDAP servers<\/a> (including the hardware) to choose from, several free LDAP software options are available. We\u2019ll explore those next.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ldap-providers\"><strong>LDAP Providers<\/strong><\/h2>\n\n\n\n<p>Without LDAP, IT commonly lacks visibility into user accounts and activity. Admins will therefore need to manage resource access manually, This creates a decentralized and unorganized identity and access management (IAM) model that can lead to redundancies, friction, and security risk.<\/p>\n\n\n\n<p>When organizations realize that the cost of implementing a solution is less than that of time-intensive manual management and the attendant risks, they often begin to look at LDAP. These are a few LDAP solutions most businesses consider:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Active Directory (AD)<\/strong><\/h3>\n\n\n\n<p>AD uses LDAP and Kerberos to authenticate users to resources. As a Microsoft product, it is best suited for Windows-based environments. To use AD, IT admins must pay to license Windows Server, which includes AD. This represents the traditional licensing model that IT organizations know well with Microsoft products.<\/p>\n\n\n\n<p>AD also requires remote access, like a VPN or SD-WAN, to authenticate remote users to on-prem resources. Azure Active Directory has recently emerged as an extension to AD but lacks true, native LDAP capabilities.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>OpenLDAP<\/strong><\/h3>\n\n\n\n<p>As noted previously, OpenLDAP doesn\u2019t cost anything to download. However, significant costs surround the infrastructure\u2019s setup and ongoing management. Because of its open-source roots, OpenLDAP works great with Linux- and Unix-based OSes, so you\u2019ll find it in many DevOps environments. Like AD, you\u2019ll need a VPN to authenticate to on-prem resources.<\/p>\n\n\n\n<p><em>Learn more about<\/em><a href=\"https:\/\/jumpcloud.com\/blog\/difference-between-ldap-openldap-active-directory\"><em> <\/em><em>OpenLDAP vs Active Directory here<\/em><\/a><em>.<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Cloud LDAP<\/strong><\/h3>\n\n\n\n<p>Cloud-based LDAP is vendor-neutral and works with a wide variety of IT resources. With a cloud directory platform, there is no need for a VPN\u2014although they are still supported\u2014instead, a lightweight agent on the user\u2019s device establishes a secure TLS connection at the start of each session. This allows users to connect to their LDAP resources without a VPN securely.<\/p>\n\n\n\n<p>Cloud LDAP services often include additional protocols so one tool can grant users access to virtually all their resources.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ldap-pros-and-cons\"><strong>Pros and Cons of LDAP<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>What Are the Advantages of LDAP?<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Open Source<\/h4>\n\n\n\n<p>&nbsp;It doesn\u2019t often cost anything to download, and quickly try<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-openldap\"> OpenLDAP<\/a>.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Standardized<\/h4>\n\n\n\n<p>LDAP was ratified as an Internet Engineering Task Force (IETF) standard in 1997 with<a href=\"https:\/\/tools.ietf.org\/html\/rfc2251\" target=\"_blank\" rel=\"noreferrer noopener\"> RFC 2251<\/a>. As such, the industry at large supports LDAP and will continue to do so.\u00a0<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Flexibility<\/h4>\n\n\n\n<p>Developers and IT admins utilize<a href=\"https:\/\/jumpcloud.com\/blog\/ldap\/what-is-ldap-authentication\"> LDAP authentication<\/a> for many use cases, including application and remote server authentication. And because it\u2018s been used in so many different ways, there is a community surrounding the protocol that helps people get the most out of it.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Device-Agnosticism<\/h4>\n\n\n\n<p>LDAP is compatible with different operating systems and devices. However, different LDAP offerings may limit this flexibility; AD, for example, is Windows-centric and often requires add-ons to work seamlessly with additional operating systems.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Security<\/h4>\n\n\n\n<p>In its original instance, LDAP was transmitted over clear text. Today, however, there are options to encrypt LDAP communications, either over Secure Sockets Layers through LDAP over SSL i.e., LDAPS, or Transport Layer Security through StartTLS i.e STARTTLS.&nbsp;<\/p>\n\n\n\n<p>STARTTLS is the ideal and highly secure option, with LDAPS coming in second \u2014 always use one of the two wherever possible (now, almost everywhere) rather than using clear text.&nbsp;<\/p>\n\n\n\n<p><em>Learn more about<\/em><a href=\"https:\/\/jumpcloud.com\/blog\/ldap-vs-ldaps\"><em> <\/em><em>LDAP vs. LDAPS<\/em><\/a><em> here.<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>What Are the Drawbacks of LDAP?<\/strong><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Age<\/h4>\n\n\n\n<p>LDAP is an older protocol. Newer authentication protocols like<a href=\"https:\/\/jumpcloud.com\/blog\/what-is-saml\"> SAML<\/a> are built for modern, cloud-forward IT environments that use web applications.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">On-Prem<\/h4>\n\n\n\n<p>LDAP is traditionally set up on-prem with an OpenLDAP server, and it is not an easy undertaking. For organizations moving to the cloud, setting up an on-prem authentication mechanism that bridges to cloud IT resources is less than ideal.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Expertise<\/h4>\n\n\n\n<p>LDAP setup and maintenance generally require an expert. People with this level of technical knowledge can be difficult to find and expensive. This is especially true for OpenLDAP.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Significant Ramp-Up<\/h4>\n\n\n\n<p>The larger your organization, the more difficult it is to start a new directory. Because directories are essentially an amalgamation of all the components in your organization, it can be challenging to build a new directory from scratch or pivot from one directory to another.<\/p>\n\n\n\n<p>Fortunately,<a href=\"https:\/\/jumpcloud.com\/platform\/cloud-directory\" target=\"_blank\" rel=\"noreferrer noopener\"> cloud directory platforms<\/a> like JumpCloud have setup guidance and can integrate with existing directories like AD. Therefore, large companies looking to take advantage of cloud LDAP can do so without doing a full about-face.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"extending-ldap-full-cloud-directory\"><strong>Extending LDAP to a Full Cloud Directory&nbsp;<\/strong><\/h2>\n\n\n\n<p>Cloud LDAP uses a cloud-hosted server to provide users access to all their on-prem resources. Cloud directory platforms now combine LDAP with other<a href=\"https:\/\/jumpcloud.com\/blog\/protocols-using-identity-management\"> IAM protocols<\/a>, like SAML, OAuth, RADIUS, SCIM, and WebAuthn, facilitating secure authentication and authorization to web and cloud-based resources.<\/p>\n\n\n\n<p>Some LDAP instances integrate with protocols like RADIUS to facilitate secure WiFi and VPN access, Samba for secure file authorization, SAML, JIT, and SCIM for automated web-based identity provisioning.&nbsp;<\/p>\n\n\n\n<p>The result is one core directory that manages your users and grants them access to all the IT resources they need\u2014both on-prem and cloud-based\u2014from wherever they are.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"cloud-ldap-and-beyond-jumpcloud\"><strong>Cloud LDAP and Beyond with JumpCloud<\/strong><\/h2>\n\n\n\n<p>Take control of your organization&#8217;s IAM and device management with<a href=\"https:\/\/jumpcloud.com\/platform\/ldap\" target=\"_blank\" rel=\"noreferrer noopener\"> JumpCloud&#8217;s cloud directory platform<\/a>. By combining LDAP with other secure protocols, JumpCloud offers a comprehensive solution for<a href=\"https:\/\/jumpcloud.com\/blog\/how-to-connect-your-application-to-ldap\"> connecting users to IT resources<\/a> while also implementing a Zero-Trust security approach to keep devices and data secure.\u00a0<\/p>\n\n\n\n<p>Plus, with user-friendly GUI and live chat support, you&#8217;ll have all the tools you need to manage your network with ease. Don&#8217;t wait &#8211;<a href=\"https:\/\/jumpcloud.com\/pricing\" target=\"_blank\" rel=\"noreferrer noopener\"> check out our pricing model<\/a>, sign up for JumpCloud today, and enjoy the benefits of streamlined IAM and device management firsthand.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.<\/p>\n","protected":false},"author":9,"featured_media":82733,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[],"collection":[2779],"platform":[],"funnel_stage":[3016],"coauthors":[2511],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The Complete Guide to LDAP (Everything You Need to Know)<\/title>\n<meta name=\"description\" content=\"This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is LDAP? The Ultimate Guide\" \/>\n<meta property=\"og:description\" content=\"This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-11T17:40:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-02T15:25:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"384\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Rajat Bhargava\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rajat Bhargava\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\"},\"author\":{\"name\":\"Rajat Bhargava\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/bda984539a66b23f47085df4f41635ba\"},\"headline\":\"What Is LDAP? The Ultimate Guide\",\"datePublished\":\"2021-08-11T17:40:00+00:00\",\"dateModified\":\"2023-05-02T15:25:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\"},\"wordCount\":4144,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg\",\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\",\"url\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\",\"name\":\"The Complete Guide to LDAP (Everything You Need to Know)\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg\",\"datePublished\":\"2021-08-11T17:40:00+00:00\",\"dateModified\":\"2023-05-02T15:25:15+00:00\",\"description\":\"This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/what-is-ldap\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg\",\"width\":512,\"height\":384,\"caption\":\"man working at his desk on his computer\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-ldap#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is LDAP? The Ultimate Guide\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/bda984539a66b23f47085df4f41635ba\",\"name\":\"Rajat Bhargava\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/be4a33b774a839755d850c80fafe3427\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bf74832070f694ca8ecf307f64295d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bf74832070f694ca8ecf307f64295d14?s=96&d=mm&r=g\",\"caption\":\"Rajat Bhargava\"},\"description\":\"Rajat Bhargava is an entrepreneur, investor, author, and CEO and co-founder of JumpCloud. An MIT graduate with over two decades of high-tech experience, Rajat is a ten-time entrepreneur with six exits including two IPOs and four trade sales.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The Complete Guide to LDAP (Everything You Need to Know)","description":"This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/what-is-ldap","og_locale":"en_US","og_type":"article","og_title":"What Is LDAP? The Ultimate Guide","og_description":"This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.","og_url":"https:\/\/jumpcloud.com\/blog\/what-is-ldap","og_site_name":"JumpCloud","article_published_time":"2021-08-11T17:40:00+00:00","article_modified_time":"2023-05-02T15:25:15+00:00","og_image":[{"width":512,"height":384,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg","type":"image\/jpeg"}],"author":"Rajat Bhargava","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rajat Bhargava","Est. reading time":"19 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap"},"author":{"name":"Rajat Bhargava","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/bda984539a66b23f47085df4f41635ba"},"headline":"What Is LDAP? The Ultimate Guide","datePublished":"2021-08-11T17:40:00+00:00","dateModified":"2023-05-02T15:25:15+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap"},"wordCount":4144,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg","articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap","url":"https:\/\/jumpcloud.com\/blog\/what-is-ldap","name":"The Complete Guide to LDAP (Everything You Need to Know)","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg","datePublished":"2021-08-11T17:40:00+00:00","dateModified":"2023-05-02T15:25:15+00:00","description":"This post covers everything you need to know about LDAP, from its origins to its place in our contemporary, cloud-driven world.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/what-is-ldap"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/08\/working.jpeg","width":512,"height":384,"caption":"man working at his desk on his computer"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/what-is-ldap#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"What Is LDAP? The Ultimate Guide"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/bda984539a66b23f47085df4f41635ba","name":"Rajat Bhargava","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/be4a33b774a839755d850c80fafe3427","url":"https:\/\/secure.gravatar.com\/avatar\/bf74832070f694ca8ecf307f64295d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bf74832070f694ca8ecf307f64295d14?s=96&d=mm&r=g","caption":"Rajat Bhargava"},"description":"Rajat Bhargava is an entrepreneur, investor, author, and CEO and co-founder of JumpCloud. An MIT graduate with over two decades of high-tech experience, Rajat is a ten-time entrepreneur with six exits including two IPOs and four trade sales.","sameAs":["https:\/\/jumpcloud.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/3535"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=3535"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/3535\/revisions"}],"predecessor-version":[{"id":82735,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/3535\/revisions\/82735"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/82733"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=3535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=3535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=3535"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=3535"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=3535"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=3535"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=3535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}