https://github.com/thesuess/laada

LDAP Azure Active Directory Authentication
https://github.com/thesuess/laada

active-directory authentication azure azure-active-directory ldap

Last synced: 2 months ago
JSON representation

LDAP Azure Active Directory Authentication

• Host: GitHub
• URL: https://github.com/thesuess/laada
• Owner: theSuess
• License: bsd-3-clause
• Created: 2022-03-18T11:15:07.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2022-04-09T10:03:41.000Z (about 4 years ago)
• Last Synced: 2025-04-03T16:23:51.028Z (about 1 year ago)
• Topics: active-directory, authentication, azure, azure-active-directory, ldap
• Language: Rust
• Homepage:
• Size: 268 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
Laada

===

[![Continuous integration](https://github.com/theSuess/laada/actions/workflows/ci.yml/badge.svg)](https://github.com/theSuess/laada/actions/workflows/ci.yml)

_LDAP Azure Active Directory Authentication_

Laada is a small service, allowing LDAP authentication with Azure Active

Directory as a backend. The primary use case is to allow authentication with

Azure AD for services which do not implement OIDC or SAML.

It accomplishes this by verifying the LDAP bind password with a registered TOTP

(either Hardware or software based).

After a user has registerd for the first time using the web interface, the

target flow looks like this:

1. Application asks user for credentials

2. User enters their email as username and TOTP token as password

3. The application sends this to the Laada LDAP endpoint

4. Laada verifies this bind with the TOTP backend

5. The bind succeeds or fails based on the response

Laada also exposes LDAP search capabilities (currently only supporting top-level

equality filters), backed by the Microsoft Graph API

# FAQ

## Why not use Azure AD Domain Services?

Because it costs money and I don't want to spend it.

## Why use Azure AD at all?

Because I like its features (Self-Service, External user management, Advanced

access policies) and it is free in the basic variant.

## Why rust?

Because it was the first language with a usable LDAP server implementation that

I found and I wanted to learn it for a long time.