An access request hits your server. The system needs to know if the user is real, valid, and allowed in. Identity LDAP decides.
Lightweight Directory Access Protocol (LDAP) is the standard for querying and modifying directory services over TCP/IP. Identity LDAP is the practice of using LDAP to store, manage, and authenticate user identities across systems. It centralizes credentials, permissions, and roles in one authoritative directory—often OpenLDAP or Microsoft Active Directory.
With Identity LDAP, authentication is simple: the application sends the user’s credentials to the LDAP server. The server matches them against the directory and returns success or failure. Authorization layers use LDAP group memberships and attributes to decide what the user can do. All identity data lives in the directory. All changes propagate instantly to every connected system.
LDAP directories store entries in a hierarchical tree called the Distinguished Name (DN). Each entry contains attributes—common ones include uid, cn, mail, and memberOf. The protocol supports search filters, binding for authentication, and modify operations for updates. TLS encryption keeps credentials secure in transit.