---
title: "Rocket Chat LDAP Connection Setup Guide"
slug: "ldap-connection"
description: "Set up LDAP connections in Rocket Chat. Ensure secure access, identity controls, and compliance for mission-critical communications."
updated: 2026-10-26T16:46:50Z
published: 2026-10-26T16:46:50Z
canonical: "docs.rocket.chat/ldap-connection"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rocket.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure LDAP Connection

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/Premium(1).svg)

> [!WARNING]
> From Rocket.Chat 9.0.0, LDAP is available on Starter workspaces and on all premium plans (Commercial, Government, and Defense). It is not available on Community workspaces. See [Our Plans](/v1/docs/our-plans) for details.

## General settings

| Setting | Description |
| --- | --- |
| **Enable** | Turn LDAP authentication on or off. |
| **Server Type** | Select the type of server you’re connecting to (for example, Active Directory). |
| **Host** | Enter the LDAP host or domain. Example: `ldap.example.com` or `10.0.0.30`. |
| **Port** | Specify the LDAP connection port. Default values: `389` (LDAP) or `636` (LDAPS). |
| **Reconnect** | Automatically attempt to reconnect if the connection is interrupted. |
| **Login Fallback** | Allow users to log in with their local Rocket.Chat account if the LDAP server is unavailable. |

> [!NOTE]
> For sample values of different settings, see the [LDAP Setup Example](https://docs.rocket.chat/v1/docs/ldap-setup) guide.

## Authentication

Configure the following settings to allow Rocket.Chat to authenticate users via LDAP.

| Setting | Description |
| --- | --- |
| **Enable** | Turn LDAP authentication on or off. |
| **User DN** | Enter the distinguished name (DN) of the LDAP user that performs lookups to authenticate other users. This is typically a service account. Example: `cn=Administrator,cn=Users,dc=example,dc=com` |
| **Password** | Enter the password for the **User DN** account. |

## Encryption

Configure the encryption settings used for communication with the LDAP server.

| Setting | Description |
| --- | --- |
| **Encryption** | Select the method to secure communication: • `plain` – No encryption • `SSL/LDAPS` – Encrypted from the start • `StartTLS` – Upgrade to encrypted communication after connecting |
| **CA Cert** | Enter the CA certificate for signing. |
| **Reject Unauthorized** | Disable this option to allow unverified certificates (required for self-signed certificates). |

## Timeouts

Define how long Rocket.Chat waits before timing out LDAP operations.

| Setting | Description |
| --- | --- |
| **Timeout (ms)** | Time to wait for a search result before returning an error. |
| **Connection Timeout (ms)** | Maximum time before an LDAP connection attempt fails. |
| **Idle Timeout (ms)** | Time to wait after the last LDAP operation before closing the connection. Each new operation starts a new connection. |

## After configuration

1. Click **Save changes**.
2. Click **Test Connection**.
3. If successful, the message **LDAP Connection Successful** is displayed.