Integration profile
Directory source · Other LDAP directory · LDAPS
Configure a read-only source and preview identity matching before apply.
Demo baseline · November 13, 2026Connection and scope
Use entryUUID or another immutable identifier. Secret JSON: bindDn, password; optional ca. A TLS-valid read-only directory and reachable approved network route are required.
- Transport
ldap- External ID
entryUUID- Default coalescing path
mail
Provider fields
| Key | Label | Example |
|---|---|---|
baseDn | Search base DN | ou=people,dc=example,dc=com |
filter | LDAP user filter | (objectClass=inetOrgPerson) |
privateCidrs | Approved private network CIDRs | 10.20.0.0/16 |
caAlias | Optional private CA credential alias | directory-ca |
Default mapping
| Source | Target | Transform |
|---|---|---|
givenName | firstName | text |
sn | lastName | text |
mail | email | lower |
uid | username | lower |
entryUUID | ldapCorrelationId | text |
Verify and troubleshoot
Preview, apply, and diagnose a directory import. Verify the immutable key, existing-account match, complete pagination and disable thresholds before applying.