Adds LDAP support to SilverStripe including user synchronisation and authentication
This SilverStripe module provides integration with LDAP (Lightweight Directory Access Protocol) servers. It comes with two major components:
These components may be used in any combination, also alongside the default SilverStripe authentication scheme.
Install using Composer:
composer require silverstripe/ldap ^1.0
This module has been tested using Samba 4. It has also been tested in previous major releases against:
This module has not been tested on OpenLDAP.
Note: For SilverStripe 3, please see the silverstripe-activedirectory module.
This module will provide an LDAP authenticator for SilverStripe, which will authenticate via LDAPS against members in your AD server. The module comes with tasks to synchronise data between SilverStripe and AD, which can be run on a cron.
To synchronise further personal details, LDAP synchronisation feature can be used, also included in this module. This allows arbitrary fields to be synchronised - including binary fields such as photos. If relevant mappings have been configured in the CMS the module will also automatically maintain SilverStripe group memberships, which opens the way for an AD-centric authorisation.
Note: If you are looking for SSO with SAML, please see the silverstripe-saml module.
With appropriate configuration, this module provides a secure means of authentication and authorisation.
AD user synchronisation and authentication is hidden behind the backend (server to server communication), but must still use encrypted LDAP communication to prevent eavesdropping (either StartTLS or SSL - this is configurable). If the webserver and the AD server are hosted in different locations, a VPN could also be used to further encapsulate the traffic going over the public internet.
Note that the LDAP protocol does not communicate over HTTP. If this is what you're looking for, you may be interested in SAML instead.
Please see the GitHub releases for changes.
Module rating system helping users find modules that are well supported. For more on how the rating system works visit Module standards
Score not correct? Let us know there is a problem