# LDAP Configuration

You can configure the `gm-jwt-security` service to search an LDAP server for user payloads. To use LDAP as a backend service, refer to the following configuration options.

## Enable LDAP Configuration

To enable, `USE_LDAP` must be set to true.

| Variable             | Default Value                            | Description                                                     | Type                                             |          |
| -------------------- | ---------------------------------------- | --------------------------------------------------------------- | ------------------------------------------------ | -------- |
| `USE_LDAP`           | `false`                                  | `true` to configure and search an LDAP server for user payloads | `bool`                                           |          |
| `LDAP_ADDR`          | `"ldap.example.com"`                     | the LDAP server address                                         | `string`                                         |          |
| `LDAP_PORT`          | `389`                                    | the LDAP server port                                            | `uint`                                           |          |
| `LDAP_TLS`           | `false`                                  | `true` to encrypt the LDAP connection                           | `bool`                                           |          |
| `LDAP_BASE_DN`       | `dc=example,dc=com`                      | base userDN for LDAP search requests                            | `string`                                         |          |
| `LDAP_USER`          | `"cn=read-only-admin,dc=example,dc=com"` | user to associate with the LDAP session                         | `string`                                         |          |
| `LDAP_USER_PASSWORD` | \`"echo \\"password\\"                   | base64 -> cGFzc3dvcmQK"\`                                       | password to associate with the LDAP session user | `base64` |
| `LDAP_TEST_DN`       | `"cn=admin,dc=example,dc=com"`           | test user payload for LDAP                                      | `string`                                         |          |

## Questions

{% hint style="success" %}
**Need help configuring JWT for LDAP?** Contact our team at [Grey Matter Support](https://support.greymatter.io/support/home).
{% endhint %}