---
schema_version: "1"
id: 6533934befd336b47259e2e4991b2cb7467626cd840f9c34eb178b2b23460ff8
title: Configuring LDAP in Anypoint Platform Private Cloud Edition
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/access-management/conf-ldap-private-cloud-task.md
canonical_url: https://docs.mulesoft.com/access-management/conf-ldap-private-cloud-task
source_site: docs.mulesoft.com
content_type: documentation
content_hash: c1e5c4507b995b0483b7e1575bddf784073bbbe122de91b1ff37e8480040a5c0
description: MuleSoft Documentation Site
latest: true
---
---
product: Access Management
version: master
---

# Configuring LDAP in Anypoint Platform Private Cloud Edition

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Configure user management for Anypoint Platform Private Cloud Edition (Anypoint PCE) using LDAP
version 3. LDAP configuration is available only for Anypoint PCE deployments.

1.  From Anypoint Platform, click **Access Management > External Identity**.

    A form for configuring LDAP appears.

2.  In the LDAP configuration form, set the connection settings for your LDAP service.

    - Host

      The host name of your LDAP server. If you’re using TLS, use `ldaps://` as the prefix.
      Otherwise, use `ldap://`.

    - Port

      The port used to communicate to your LDAP server. The default ldap port is `389`. The default
      ldaps port is `636`.

    - Self-Signed Cert

      Select this checkbox if you’re using a self-signed certificate on your LDAP server. Use a
      self-signed certificate for testing your connection to the LDAP server.

    - Bind DN

      The distinguished name for the user making the LDAP queries. For example,
      `uid=admin,ou=people,dc=mulesoft,dc=com`.

    - Password

      The password for the LDAP server. For example,`examplepassphrase`.

    - Connection Timeout

      The timeout frame (in seconds) for a connection. For example, `10`.

    - Operation Timeout

      The timeout frame (in milliseconds) for an operation. For example, `30000`.

3.  Set up search bases and filters

    - User

      The base level for your user search base object. For example, `uid=admin,dc=mulesoft,dc=com`.

    - Group

      The base level for your groups search base object. For example,
      `ou=groups,dc=mulesoft,dc=com`.

4.  Set the distinguished names for your user and group

    - User

      The distinguished name for your user search base object. For
      example,`uid={{username}},ou=people.dc=mulesoft,dc=com`.

    - Group

      The distinguished name for your groups search base object. For example,
      `ou=groups,dc=mulesoft,dc=com`.

    - Search filters

      - User by Username

        The search filter to find users by user name. For example,
        `(&(objectClass=inetOrgPerson)(uid={{username}}))`.

      - User by Email

        The search filter to find users by email. For example,
        `(&(objectClass=inetOrgPerson)(mail={{email}}))`.

      - Group by GroupName

        The search filter to find groups by groupName. For example,
        `(&(objectClass=groupOfNames)(cn={{groupName}}))`.

      - User’s Groups by Username

        The search filter to find user groups by userName. For example,
        `(&(objectClass=GroupOfNames)(member=uid={{username}},ou=people,dc=mulesoft,dc=com))`.

5.  Map the User fields

    - Username

      Field that represents the user name. For example, `uid`.

    - Email

      Field that represents the email. For example, `mail`.

    - First Name

      Field that represents the first name. For example, `givenName`.

    - Last Name

      Field that represents the last name. For example, `sn`.

    - ID

      ID for your user. For example, `uid`.

6.  Map the group fields

    - Group Name

      Field that represents your Group name. For example,`cn`.

    - ID

      Field that represents your groups Id. For example, `bcd6b4c4-aec5-4493-be1b-8e2e8eecf662`.

7.  Save the configuration.