Configure a LDAP connection

By default, LDAPCP connects to the Active Directory the SharePoint servers belong to, as the application pool / process identity.
You can replace it with a more secure connection, using LDAPS, or add other connections (there is no limit).

Add a LDAPS connection

To encrypt the LDAP traffic between SharePoint and the LDAP server, you can configure the connection to use LDAPS (LDAP over SSL).

Note

Before you proceed, ensure that LDAPS is configured on the LDAP server (documentation for Active Directory).

To add the connection to LDAPCP using the Central Administration:

Navigate to the SharePoint Central Administration > Security > LDAPCP SE Global configuration.
In the section Register a new LDAP connection, fill the fields as below:
- In the LDAP path, type the connection using this format: LDAP://contoso.local:636/DC=contoso,DC=local.
- Fill the username and password.
- In Select the authentication type to use, make sure to select Encryption. Other options can also be set as needed.
Click on Add LDAP connection to add the connection.

To add the connection to LDAPCP using PowerShell:

Add-Type -AssemblyName "Yvand.LDAPCPSE, Version=1.0.0.0, Culture=neutral, PublicKeyToken=80be731bc1a1a740"
$config = [Yvand.LdapClaimsProvider.LDAPCPSE]::GetConfiguration()
$settings = $config.Settings

# Create a LDAPS Connection
$ldapConnection = New-Object "Yvand.LdapClaimsProvider.Configuration.DirectoryConnection"
$ldapConnection.LdapPath = "LDAP://contoso.local:636/DC=contoso,DC=local"
$ldapConnection.Username = "contoso\serviceAccount"
$ldapConnection.Password = "<PASSWORD>"
$ldapConnection.AuthenticationType = [System.DirectoryServices.AuthenticationTypes] "Encryption" # Other options can also be set as needed

$settings.LdapConnections.Add($ldapConnection)
$config.ApplySettings($settings, $true)

Add a LDAP connection

Important

With LDAP, the traffic is not encrypted and it will appear in clear text in a network capture.

To add the connection to LDAPCP using the Central Administration:

Navigate to the SharePoint Central Administration > Security > LDAPCP SE Global configuration.
In the section Register a new LDAP connection, fill the fields as below:
- In the LDAP path, type the connection using this format: LDAP://contoso.local/DC=contoso,DC=local.
- Fill the username and password.
- In Select the authentication type to use, select the options as needed.
Click on Add LDAP connection to add the connection.

To add the connection to LDAPCP using PowerShell:

Add-Type -AssemblyName "Yvand.LDAPCPSE, Version=1.0.0.0, Culture=neutral, PublicKeyToken=80be731bc1a1a740"
$config = [Yvand.LdapClaimsProvider.LDAPCPSE]::GetConfiguration()
$settings = $config.Settings

# Create a LDAP Connection
$ldapConnection = New-Object "Yvand.LdapClaimsProvider.Configuration.DirectoryConnection"
$ldapConnection.LdapPath = "LDAP://contoso.local/DC=contoso,DC=local"
$ldapConnection.Username = "contoso\serviceAccount"
$ldapConnection.Password = "<PASSWORD>"

$settings.LdapConnections.Add($ldapConnection)
$config.ApplySettings($settings, $true)