# LDAP Authentication

To create a User with the login method "LDAP Authentication," you need to check the box "Use LDAP Authentication" and then fill in the "LDAP Users" field:

<figure><img src="https://3237142148-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FscP4BXwl9ufpJr5mfVln%2Fuploads%2Fgit-blob-ae361ef3be8dd1f16dccb1fa3dee7e4a59b40271%2Fimage%20(49).png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3237142148-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FscP4BXwl9ufpJr5mfVln%2Fuploads%2Fgit-blob-ae361ef3be8dd1f16dccb1fa3dee7e4a59b40271%2Fimage%20(49).png?alt=media" alt=""><figcaption></figcaption></figure>

You can also optionally fill in the fields:

<table data-header-hidden><thead><tr><th width="209"></th><th width="342"></th></tr></thead><tbody><tr><td><strong>Interface Element</strong></td><td><strong>Description</strong></td></tr><tr><td>"LDAP Users" field</td><td>Allows specifying an LDAP User using a dropdown list. This authentication option is available if the connection details to the LDAP server are specified in the Sherpa AI Server configuration. This field is available for LDAP authentication.</td></tr><tr><td>"Email" text field</td><td>Email address for automatic message sending.</td></tr><tr><td>"First Name" text field</td><td>User's first name.</td></tr><tr><td>"Last Name" text field</td><td>User's last name.</td></tr><tr><td>"Department" text field</td><td>Name of the department/location of the User's workplace.</td></tr><tr><td>"Notify about audit messages of the following types" checkboxes</td><td><p>Allow the User (when specifying an email address and checking the boxes for Sherpa AI Server message types) to receive automatically sent notifications via email. Possible options:</p><ul><li>Critical;</li><li>Error;</li><li>Warning;</li><li>Notice;</li><li>Info;</li><li>Debug.</li></ul></td></tr><tr><td>"Role" field</td><td>Allows specifying a pre-configured Role (one or more), according to which access to Sherpa AI Server tools (creation, editing, reading, and deleting objects) will be configured.</td></tr><tr><td>"User is blocked" checkbox</td><td>Allows blocking the User.</td></tr><tr><td>"Notify about license expirations via email" checkbox</td><td>Enables the function to notify the User about license expirations via email.</td></tr></tbody></table>

To use AD authentication, you need to fill in the corresponding parameters in the `config.ini` file located at `/opt/SherpaOrchestrator/backend/config/config.ini`:

* ldap\_server;
* ldap\_port;
* ldap\_encryption;
* ldap\_base\_dn;
* ldap\_group.

Then restart the container for installation via Docker (if installed locally, restart the server if necessary).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sherparpa.ru/en/sherpa-ai/sherpa-ai-server/rabota-v-sherpa-ai-server/polzovateli/avtorizaciya-polzovatelei/ldap-autentifikaciya.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
