> ## Documentation Index
> Fetch the complete documentation index at: https://docs.apinizer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Manager LDAP Integration

> Explains how to add LDAPs login information in Apinizer and how to login to Apinizer with your LDAP users as an example.

This document explains how to add LDAPs login information in Apinizer and how to login to Apinizer with your LDAP users as an example.

## 1) Adding LDAPs Connection Information

Open **Connection Management → LDAP/Active Directory** page and add your information.

In the **Server Address** field, start with **ldaps\://** and add **ldap domain** and then **636** **port**.

An example image containing LDAPs connection settings is provided below:

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/01-ldaps-baglanti-ayarlari.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=8dff4269006bf333b1703b25d7cf7dad" alt="LDAPs Connection Settings" width="1000" height="462" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/01-ldaps-baglanti-ayarlari.png" />

Check the **Use SSL** button for SSL usage.

If **Certificate Required** is selected in the **Certificate Status** field, see [this address](/en/admin/secrets-management/certificates) to add certificate.

You can also make a limitation in the search by using the **Custom Filter** field.

For example, the filter **(&(objectClass=inetOrgPerson)(mail=[example@example.com](mailto:example@example.com)))** will work for users belonging to **"inetOrgPerson"** class and with email address **"[example@example.com](mailto:example@example.com)"**.

In LDAP, users and groups are usually stored under different organizational units.

Therefore, different **base DN** addresses can be given for users and groups:

* Base DN for users: `ou=Users,dc=example,dc=com`
* Base DN for groups: `ou=Groups,dc=example,dc=com`

After completing the entry of your LDAP information, select one from the **Environment** field on the same page and click the **Test Connection** button, and when the operation is successful, an output like in the example image below will be seen.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/02-test-connection-success.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=0adb9a3ac1f142cedfdf1b5ddebc1fdb" alt="Test Connection Successful" width="400" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/02-test-connection-success.png" />

You can complete adding LDAPs information to your system by clicking the **Save and Deploy** button.

## 2) LDAPs Login Settings

This section contains LDAP connection configurations that will enable integration with identity management systems in organizations that can be accessed via LDAP connection so that users can login to Apinizer.

Open **Administration → System Settings → LDAP Settings** page.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/03-ldap-settings-page.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=974205547c05708ecbbe12d2a5338609" alt="LDAP Settings Page" width="1000" height="471" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/03-ldap-settings-page.png" />

Give a name to the connection as in the image above and select the LDAP connection you added in the previous step from the **LDAP Connection** section. Click the edit button marked with red areas and enter the relevant information.

Example usage for the **User Object Class Definition** popup page is shown in the image below:

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/04-user-object-class-definition.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=9e077d79215572705791424f6fae5a8e" alt="User Object Class Definition" width="1000" height="565" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/04-user-object-class-definition.png" />

You can view how to fill the relevant fields for **User** in the example image above by connecting to your existing LDAP application.

One of the parts to pay attention to is that **object class** value is written in the **User Object Class Name** field.

Only **attribute** expression is written in other fields specified as **Attribute**.

For this example, you can make an LDAP connection using the JXplorer application and examine its usage from the image below.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/05-jxplorer-example.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=38dc72b66351797ac647f23b81604ea5" alt="JXplorer User Example" width="400" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/05-jxplorer-example.png" />

According to the example image above, you can see that Object Class Name is **inetOrgPerson** for user. This information may vary according to your relevant **LDAP** application.

Example usage for the **Group Object Class Definition** popup page is shown in the image below:

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/06-group-object-class-definition.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=e24f006e5fc5f3a7a56c6e30e3010934" alt="Group Object Class Definition" width="1000" height="550" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/06-group-object-class-definition.png" />

You can view how to fill the relevant fields for **Group** in the example image above by connecting to your existing LDAP application.

One of the parts to pay attention to is that **object class** value is written in the **Group Object Class Name** field.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/07-jxplorer-group-example.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=9c28b461ac79d53725f13cc0bed8caf3" alt="JXplorer Group Example" width="800" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/07-jxplorer-group-example.png" />

After entering the information, click the **Test Configuration** button located at the top right corner as in the image below.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/08-test-configuration.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=16ae956ba40722cf570090dfb348b0b9" alt="Test Configuration" width="800" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/08-test-configuration.png" />

When test login is performed with the **LDAP user** whose **uid** value is **member2** as specified in the example image above and their password as login information on the opened page, it will return **Success** response.

Test with your user information in your LDAP application.

After seeing the successful response, save the information by clicking the **Save** button.

## 3) Authorizing LDAP Users or Group Members in Project

This section explains authorization operations for LDAP users and groups on a project basis.

Select a project from the area where your projects are located as in the image below.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/09-project-selection.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=656a4addfddf7ec20c9d42328e6a875c" alt="Project Selection" width="600" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/09-project-selection.png" />

After selecting a project, to give user permission to your project:

Open **Project Settings → Members** page.

Write your LDAP user in the **LDAP User Members** field as in the image below and click the **Search in LDAP** button.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/10-ldap-user-members.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=c499fdcab969e1f007f47b06412da2d0" alt="LDAP User Members" width="1000" height="486" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/10-ldap-user-members.png" />

Your LDAP user will appear on the screen as in the image below, you can select a permission in the **Choose** field and add it with **Add**.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/11-add-user-permission.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=6b196dafd5439f47410f342a950ff507" alt="Adding User Permission" width="1000" height="216" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/11-add-user-permission.png" />

You can add **permissions within group members** in the field shown in the image below.

<img src="https://mintcdn.com/apinizer/gLS8K_ShIG974XDA/images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/12-group-members-permissions.png?fit=max&auto=format&n=gLS8K_ShIG974XDA&q=85&s=3e60b3c3646ae85b79268dfdeda23af0" alt="Group Members Permissions" width="1000" height="210" data-path="images/tutorials/nasil-yapilir-kilavuzlari/yonetici-kilavuzlari/api-manager-ldap-entegrasyonu/12-group-members-permissions.png" />

After completing the permission granting operations, you can complete the saving operation by clicking the **Save Changes** button located at the top right of the page.

After this stage, the relevant users or groups will have the permissions you specified in your project.
