> ## Documentation index
> Fetch the complete documentation index at: https://arize.com/llms.txt
> Ask it with GET https://arize.com/ask?q=<keywords or question>. Short keywords rank best.
> Use these to discover all available pages before exploring further.

# 12.06.2025: LDAP Authentication Support

> Available in Phoenix 12.20+

## LDAP Authentication

Phoenix now supports authentication against LDAP directories, enabling integration with enterprise identity infrastructure including:

- **Microsoft Active Directory**
- **OpenLDAP**
- **389 Directory Server**
- Any LDAP v3 compliant directory

**Key Features:**

* Authenticate users with their corporate directory credentials
* Automatic user provisioning on first login
* Group-based role mapping (ADMIN, MEMBER, VIEWER)
* Support for nested groups in Active Directory
* Multi-server failover for high availability
* TLS encryption with StartTLS and LDAPS support
* Mutual TLS (client certificate) authentication
* Custom CA certificate support for internal PKI

**Configuration Highlights:**

* Simple setup with just `PHOENIX_LDAP_HOST` and `PHOENIX_LDAP_USER_SEARCH_BASE`
* Flexible group-to-role mappings via JSON configuration
* Support for both AD-style `memberOf` and POSIX group lookups
* Optional immutable unique identifiers for user tracking

#### More Information in our documentation:

<Card title="LDAP Authentication | Phoenix" icon="book" href="/docs/phoenix/self-hosting/features/authentication#configuring-ldap-authentication" horizontal description="LDAP authentication setup"/>