{"id":15046627,"url":"https://github.com/auth0/ad-ldap-connector","last_synced_at":"2025-04-04T17:08:30.791Z","repository":{"id":7869598,"uuid":"9242061","full_name":"auth0/ad-ldap-connector","owner":"auth0","description":"Auth0 AD and LDAP connector","archived":false,"fork":false,"pushed_at":"2025-03-23T22:50:49.000Z","size":16430,"stargazers_count":73,"open_issues_count":105,"forks_count":77,"subscribers_count":51,"default_branch":"master","last_synced_at":"2025-03-28T16:08:56.495Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/auth0.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.rtf","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2013-04-05T13:44:53.000Z","updated_at":"2024-11-14T08:16:33.000Z","dependencies_parsed_at":"2023-02-18T07:00:45.112Z","dependency_job_id":"2d14405f-afe0-49bb-8a4f-b1d5b95b04e5","html_url":"https://github.com/auth0/ad-ldap-connector","commit_stats":null,"previous_names":[],"tags_count":126,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/auth0%2Fad-ldap-connector","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/auth0%2Fad-ldap-connector/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/auth0%2Fad-ldap-connector/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/auth0%2Fad-ldap-connector/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/auth0","download_url":"https://codeload.github.com/auth0/ad-ldap-connector/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247217184,"owners_count":20903009,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-24T20:53:18.868Z","updated_at":"2025-04-04T17:08:30.773Z","avatar_url":"https://github.com/auth0.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Auth0 AD/LDAP Connector\n\nThe __AD/LDAP Connector (1)__, is a bridge between your __Active Directory (2)__  and the __Auth0 Service (3)__. It runs on Windows, Mac and Linux. This bridge is necessary because AD is typically locked down to your internal network, and Auth0 is as cloud service running on a completely different context.\n\n![](https://images.ctfassets.net/cdy7uua7fh8z/1xMpdHrtor0TR7F1gZ96zL/130e13f59b728fe14e00f1815b90103f/ldap-connect.png)\n\nYou can install multiple instances of the connector for high availability and load balancing. Also, all connections are out-bound: from the connector to the Auth0 Server, so in general no changes to the firewall need to be applied.\n\nConfiguring an AD/LDAP connection in Auth0 requires two simple steps:\n\n### 1. Creating an AD/LDAP Connection in Auth0\n\nThe first step is creating a new Connection on the dashboard:\n\n__Connections \u003e Enterprise \u003e AD/LDAP__\n\n![](https://cdn.auth0.com/docs/media/articles/connections/enterprise/active-directory/ldap-create.png)\n\nName the connection and check whether you want `Kerberos` enabled for this connection. If you enable this, you need to enter the range of IP addresses from where `Kerberos` authentication will be enabled. These would typically be the intranet where `Kerberos` would work.\n\n![](https://cdn.auth0.com/docs/media/articles/connections/enterprise/active-directory/ldap-create-2.png)\n\n__Save__ the configuration. You are done on the Auth0 side! You will then be prompted to download the __AD/LDAP Connector__ on your machine.\n\n![](https://cdn.auth0.com/docs/media/articles/connections/enterprise/active-directory/ldap-create-3.png)\n\n\u003e We ship different versions of the Connector to install it on multiple platforms: Windows, Linux and OS X\n\nKeep the __TICKET URL__ at hand as you will need it later.\n\n### 2. Installing the AD/LDAP Connector\n\n#### Auth0 AD LDAP Connector Setup (Windows Agent)\nOn Windows, the Connector is packaged as a standard installer file (__MSI__). Run it on the machine you want to install it and follow the installation wizard:\n\n![](https://cdn.auth0.com/docs/media/articles/connector/install/adldap-connector-setup.png)\n\n\u003e The __AD/LDAP Connector__ in Windows is installed as a Service:\n\n![](https://cdn.auth0.com/docs/media/articles/connector/install/adldap-connector-services.png)\n\nOnce the installation is complete, you will see the following screen on a browser (notice that the browser is opening a page on the local machine).\n\nEnter the __TICKET URL__ that was generated in __Step 1__.\n\nThe __Ticket URL__ uniquely identifies this connector in Auth0. Don't share it with anyone. The Connector will use this to communicate with Auth0 Server and automatically complete the configuration.\n\n![]()\n\nIf successful, the next screen will allow you to enter your __Active Directory__ connection parameters. Namely:\n\n* The __LDAP Connection String__ (this is the network location of the server)\n* The __Base DN__\n* A __Username__ and a __Password__\n\nThese are credentials used by the __AD/LDAP Connector__ to authenticate itself with AD.\n\n![](https://s3.amazonaws.com/blog.auth0.com/adldap_04.PNG)\n\n\n### 3. Testing your new Active Directory/LDAP connection\n\nGo back to your Auth0 Dashboard and you should see a green dot next to your Connection definition:\n\n![](https://s3.amazonaws.com/blog.auth0.com/adldap_07.png)\n\nThis signals that the __AD/LDAP Connector__ is online and working. Click in __Try__ to test the entire flow. If you configured `Kerberos` and testing this inside your network, your login will happen automatically.\n\nIf you didn't configure `Kerberos` or you are outside your intranet you will be prompted for credentials. After successful authentication you should see the test screen showing the user profile:\n\n![](https://s3.amazonaws.com/blog.auth0.com/adldap_08.png)\n\n\u003e Notice the __User profile__ includes the __Groups__ a user belongs to in AD. This will include any nested groups (flattened list).\n\n### 4. High availability\n\nHigh availability is achieved through multiple instances of the connector running simultaneously.\n\n1.  Install the connector on the first machine and follow all the steps. Once you have the connection running with only one agent move to the next step.\n2.  In the AD LDAP configuratino page click on __Import / Export__ and then click __Export__. Keep a copy of the zip file.\n3.  Install the connector on the second machine, when the browser opens and requests entering the __Ticket URL__, click on __Import / Export__.\n4.  In the __Import__ section select the file you downloaded from the first machine and click __Upload__.\n5.  Repeat from step 3 to 4 for every node you want to configure.\n\n## Running behind a proxy\n\nWe discourage running the connector behind an http proxy.\n\nIf you still want to try it out behind a proxy you need an environment variable `http_proxy` or `HTTP_PROXY` set to `http://my-proxy:8080`.\n\n## Troubleshooting\n\nIf you always get invalid username or password, try to search a profile by password with the following command:\n\n```\nnode -e \"require('./lib/initConf'); var Users = require('./lib/users'); var users = new Users(); users._queue.push(function(){users.getByUserName('the-username-you-are-trying', function (err, user) { console.log(user); } ); });\"\n```\n\nBy default the connector search using this query LDAP `(sAMAccountName={0})`, you can override this in the config.json file:\n\n```\n\t\"LDAP_USER_BY_NAME\": \"(cn={0})\",\n```\n\nIf you get \"Invalid Ticket\" when configuring the connector for the first time, the most likely cause is a network issue (e.g. connector behind a proxy). Try connecting to `https://{your tenant}.auth0.com/testall` with a browser other than IE.\n\n## Issue Reporting\n\nIf you have found a bug or if you have a feature request, please report them \nby [Opening an issue] (https://auth0.com/docs/troubleshoot/customer-support/open-and-manage-support-tickets).\n\nPlease do not report security vulnerabilities on the public GitHub issue tracker. The [Responsible Disclosure Program](https://auth0.com/whitehat) details the procedure for disclosing security issues.\n\n## Author\n\n[Auth0](auth0.com)\n\n## License\n\nThis project is licensed under the MIT license. See the [LICENSE](LICENSE) file for more info.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fauth0%2Fad-ldap-connector","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fauth0%2Fad-ldap-connector","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fauth0%2Fad-ldap-connector/lists"}