# Placeholder configuration for the LDAP identity provider plug-in.
# Replace values with your directory settings before enabling the plug-in.
connection:
  host: "ldap.example.com"
  port: 636
  useTls: true
  bindDn: "cn=service,dc=example,dc=com"
  bindPassword: "CHANGE_ME"

queries:
  userFilter: "(uid={username})"
  groupFilter: "(member={distinguishedName})"
  groupAttribute: "cn"

capabilities:
  supportsPassword: true
  supportsMfa: false