Configure LDAP Integration in Rocket Chat

From Rocket.Chat 9.0.0, LDAP is available on Starter workspaces and on all premium plans (Commercial, Government, and Defense). It is not available on Community workspaces. See Our Plans for details.

Lightweight Directory Access Protocol (LDAP) centralizes user authentication and directory data across your organization. Rocket.Chat integrates with LDAP and Active Directory (AD) to synchronize users, assign roles, and enforce access policies while maintaining secure transmission of sensitive data.

This section covers LDAP capabilities and guides you through configuration and operational workflows.

Key capabilities

Centralized user synchronization: Synchronize user accounts and profile data between LDAP and Rocket.Chat to maintain consistency across systems.
Automated background sync: Reflect directory changes automatically without manual intervention.
Role mapping from LDAP groups: Assign Rocket.Chat roles dynamically based on LDAP group membership.
Conditional auto-logout: Log users out automatically when defined LDAP conditions are no longer met.
Extended attribute sync: Synchronize additional user attributes to support advanced configurations such as ABAC.

Configure LDAP

To enable LDAP, go to Manage > Workspace > Settings > LDAP:

Enable LDAP.
Provide the required connection and authentication parameters.
Configure synchronization and role mapping as needed.

Once enabled, users can authenticate using their LDAP credentials.

LDAP quick actions

The header of the LDAP settings screen has these buttons for validation and troubleshooting:

Test connection: Verifies the LDAP server connection, authentication, and encryption settings. It does not test synchronization.
Test LDAP search: Tests the search configuration by prompting you to enter a username and checking whether a matching LDAP user exists.
Sync now: Runs synchronization immediately using the current data sync settings. Check the Reports log for the sync result.
LDAP documentation: Opens the official Rocket.Chat LDAP documentation.

If no alert appears after running an action, review the Reports log for status or errors.