LDAP Integration

MrDoc Professional Edition supports LDAP authentication integration with OpenLDAP and Windows Active Directory.

## Example 1: Windows Active Directory

The environment consists of one organizational unit: "develop", and two users: "lisi" and "wangwu", with "wangwu" located within the "develop" organizational unit:

![](/media/202511/944cfb2cd6124de2a9f72b86ebc70fef5717.png)

Below is the AD domain information connected via the desktop application LDAP:

![](/media/202511/299822fa3a42493aa5add988e4b5bc522402.png)

The following is the LDAP configuration in MrDoc, which allows only users within the "develop" organizational unit to log in, using the `sAMAccountName` of the AD domain user as the username for login:

![](/media/202511/6d7a5c31270847dc8f0d178c6bee12a83003.png)

## Example 2: OpenLDAP

The directory structure of OpenLDAP is shown in the following diagram:

![](/media/202511/207e7f6774894ab6b153bfb5fdd6fe129043.png)

The attributes of the user are shown in the following diagram:

![](/media/202511/98fa5193cf094143bb93e5ed41f49acf2405.png)

Below is the LDAP configuration in MrDoc, which allows only users under the OpenLDAP directory `ou=qq` to log in, using the `uid` attribute of the OpenLDAP user as the username for login:

![](/media/202511/fa8aabf208f8497d879812436753188f7454.png)

## Synchronizing Users

### Synchronizing LDAP Users to MrDoc

You can synchronize members from the LDAP server to MrDoc within the configuration page of the "LDAP" authentication integration.

Currently, the following three synchronization methods are supported:

- Import LDAP users as MrDoc users;
- Import LDAP users as MrDoc users, and import the OUs to which the LDAP users belong as MrDoc user groups;
- Clean up LDAP users within MrDoc; users that do not exist in LDAP will be set to a "disabled" status.