LDAP integration setup Administrators can enable LDAP integration to allow single sign-on of users from their company LDAP directory. After the integration, the MID Server connects to the instance and the MID Server also connects to the LDAP server. In both cases, the MID Server initiates the connection: First, the MID Server connects to the LDAP server via LDAP on Port 389. Then, the MID Server initiates an HTTPS encrypted connection to the instance on Port 443 to push the data to the instance. LDAP communication channelsLDAP typically uses one of these types of communication channels.Upload the LDAP X.509 SSL certificateIf your administrator is setting up an SSL-encrypted LDAP integration (LDAPS) to communicate over TCP on port 636, and has not already uploaded a certificate as part of your instance Go Live activities.Define an LDAP serverCreate a new LDAP server record in the instance.Provide LDAP server login credentialsThe LDAP login credentials determine what organizational units the integration can see.Set LDAP connection propertiesConfigure your LDAP server connection properties.Test an LDAP connection manuallyYou can manually test the connection to the LDAP server from the LDAP server form. LDAP connection timeoutThe instance tests the connection automatically every time a user opens the LDAP Server form.Automatic LDAP operational status updateThe instance changes the operational status of LDAP servers depending on the result of the connection test.Define LDAP organizational unitsAn organizational unit (OU) definition specifies the LDAP source directories available to the integration.Create an LDAP OU data sourceEach LDAP organizational unit (OU) definition has its own related list of data sources.LDAP transform mapsThe transform map moves data from the import set table to the target table (User or Group).LDAP data transformationIf an LDAP attribute contains simple data, the transform map links an imported LDAP attribute to an appropriate field in the target table (User or Group).onStart and onAfter LDAP scriptsAny custom transform map should include onStart and onAfter scripts.Scheduled data imports for LDAPA scheduled import allows administrators to import LDAP data on a regular schedule.Auto provision LDAP usersYou automatically provision users who are in the LDAP server but not yet in your instance.