--- title: Microsoft LDAP Integration  description: "LDAP (Lightweight Directory Access Protocol) is an open-source protocol used for directory services authentication. In other words, LDAP allows applications on the system to communicate with other directory services servers and access information such as computer accounts, users, etc.\n\nThe key to breaking easily into any network resides in the organization’s Active Directory (AD), and hackers are well-aware of this fact. To prevent this breach from happening, organizations protect their Active Directory by integrating with Microsoft LDAP." --- [Skip to content](https://content.sirp.io/knowledge-base/microsoft-ldap-integration-help-center-sirp#main-content) English Show submenu for translations [Customer portal](https://content.sirp.io/customer-portal?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png)](https://sirp.io/) Open main navigation Close main navigation - English Show submenu for translations - [Customer portal](https://content.sirp.io/customer-portal) - [Contact us](https://content.sirp.io/customer-portal/new) [Contact us](https://content.sirp.io/customer-portal/new?hsLang=en) What would you like to automate today? - There are no suggestions because the search field is empty. 1. [SIRP Help Center](https://content.sirp.io/knowledge-base?hsLang=en) 2. [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) # Microsoft LDAP Integration ### About Microsoft LDAP - Active Directory Protocol LDAP (Lightweight Directory Access Protocol) is an open-source protocol used for directory services authentication. In other words, LDAP allows applications on the system to communicate with other directory services servers and access information such as computer accounts, users, etc. The key to breaking easily into any network resides in the organization’s Active Directory (AD), and hackers are well-aware of this fact. To prevent this breach from happening, organizations protect their Active Directory by integrating with Microsoft LDAP. ### Supported Actions SIRP’s integration with Microsoft LDAP allows multiple activities to be initiated from playbooks in SIRP to an Active Directory. For Active Directory services, actions include: enable and disable a user, add user to group, and remove user from group, etc. SIRP’s Microsoft LDAP integration app allows you to execute the following actions: | **Action** | **Description** | | --- | --- | | Get User Info | Action to get user info from the active directory. | | Check User Group | Action to get user group from active directory. | | Add User from Group | Action to add user in a group. | | Remove User from Group | Action to remove a user from a group. | | Disable User | Action to disable a user in the active directory. | | Enable User | Action to enable a user in the active directory. | | Change User DN | Action to change user Distinguished Name (DN) in active directory. | | Get Manager Info | Action to get info of user’s manager from active directory. |   ### Enable and Configure Active Directory ### Step 1: Creating a New User in Active Directory **Note:** *Active Directory uses the LDAP protocol to create new users, which is required for SIRP to communicate with AD and execute automated actions.* Open the **Server Manager**, go to the Tools menu and select **Active Directory Users and Computers.** 1. Expand the domain and click **Users** [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-45-2135-AM.png)](https://downloads.intercomcdn.com/i/o/302710429/014e7b8b074b85dc4cbb8f73/image.png?expires=1752237000&signature=4728f50914da163eec55eb7fc716593351c1d25145d8a47edaa0b1a5fbd4df6c&req=dyAlEch%2BmYNWFb4f3HP0gFaxxfQCkuI5cr3CVavuhJr5K7wfnu0PChun8Dc1%0Ask9Ms51icSxfCBRK3g%3D%3D%0A) 2\. Right-click on the right pane and press **New \> User.** 3\. When the **New Object-User** box displays enter the following details: a. First name b. Last name c. User logon name [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-50-2855-AM.png)](https://downloads.intercomcdn.com/i/o/302710625/79efd9f9655994eff91081cc/image.png?expires=1752237000&signature=e3ab9d9e1b6fd8ef265cbd0ff06c07f5a42be1d8779b518e7091fc01413a41eb&req=dyAlEch%2Bm4NaFb4f3HP0gF2H9UPbL1HVBHq4wZrqz6kgxOAV6Hq0ecUAUkRw%0Af0DSROleKF3%2FV0d0iA%3D%3D%0A) 4\. Click **Next**. 5\. Enter a password and press **Next**. 6\. The user has been created. ### Step 2: Manage Active Directory Permissions to Delegate Control to SIRP user account. **Note:** *An administrator may assign delegation.* To delegate control, first, identify a specific user with the right to join. Then, by using Active Directory Users and Computers, delegate the task of creating/deleting user accounts to a group—in this example, the object is SIRP. 1. In the **Active Directory Users and Computers** **\> Domain Controllers**, click the relevant **ou** where the user resides. (for example, **new ou**) 2. Right-click **new ou** and then click **Delegate Control**. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-54-8541-AM.png)](https://downloads.intercomcdn.com/i/o/302710735/5de0aad68332494e1d0ecb2a/image.png?expires=1752237000&signature=18e0fe10f6cdff499ddc727b272e15de1fbd6d01f4889b939123426dbe617a39&req=dyAlEch%2BmoJaFb4f3HP0gPjy%2FxZavJbURxlxcdtqCzasaDqMy3hwZp%2FbvmqB%0AD1mpDxlfWKYdxey8wg%3D%3D%0A) 3\. The **Delegation of Control** wizard appears. Click **Next**. 4\. Enter the user name [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-59-9388-AM.png)](https://downloads.intercomcdn.com/i/o/302710839/5235a693a0ad06e865e935d5/image.png?expires=1752237000&signature=f95a9f2a1870b616b579baa18e7d8f162ef1445cbf4e528c49349398ce31c0b8&req=dyAlEch%2BlYJWFb4f3HP0gBLmUP4mUfes5sSBlZVnfYMd4NFhrMmu6UPe7awT%0A%2BzuJu0AY1%2BCQYauJPA%3D%3D%0A) 5\. On the **Users or Groups** page, click **Add**, scroll to **users or groups**, double-click it, and click **Next** [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-05-0807-AM.png)](https://downloads.intercomcdn.com/i/o/302710887/8ff93d3752506ce66b360671/image.png?expires=1752237000&signature=6468a1ef692113245ce357717ebea80c68340d6974473078dcefae3306b89bf4&req=dyAlEch%2BlYlYFb4f3HP0gCcNaF8pfPhICLjWu%2By3sRcUNc6F99xgS4AtW4JF%0AywHjU8CdVXmkh8A5Iw%3D%3D%0A) 6\. On the **Tasks to Delegate** page, click **Create a custom task to delegate**, and then click **Next**. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-10-0288-AM.png)](https://downloads.intercomcdn.com/i/o/302710934/f98dedf2a12b117843c535c2/image.png?expires=1752237000&signature=a1ce6404a13c09ad5e716b78b109de0a2732319a83adcc82fe358227dee43dae&req=dyAlEch%2BlIJbFb4f3HP0gADmwVEHOFCDFGYdyaIB4QIOk3aqzww5ezSW8wM7%0AlnM%2FlSbQxzk8bVXdQQ%3D%3D%0A) 7\. Click **Only the following objects in the folder**. 8\. From the list, select **User objects**. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-15-5477-AM.png)](https://downloads.intercomcdn.com/i/o/302710989/8ed9dfe440c08801e6235186/image.png?expires=1752237000&signature=de6d86bc83db8fdd676276e589019a595998ea4636268a0ced6347cd7eadd53b&req=dyAlEch%2BlIlWFb4f3HP0gKf7EtqKzMrlZboEiVK%2BhTPtmlnUO9y1bS3HdjE2%0AD7Mj7%2B0eNWOyg8rA3Q%3D%3D%0A) 9\. In the permissions list, select the **Property-specific** check box for the required permissions shown in the table below. In this case select **Read userAccountControl** and **Write userAccountControl**. Note: These permissions would grant the user to enable/disable domain users through an automated action in SIRP. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-20-5547-AM.png)](https://downloads.intercomcdn.com/i/o/302711049/92f74cae7633a56b65c92b02/image.png?expires=1752237000&signature=70b18ab1353a3121af2ebba2533279160418b48d6f542a99941fe5b63de14b96&req=dyAlEch%2FnYVWFb4f3HP0gJq%2FVmcvwIx8uV9bmYxtS4BuaXqHA7v2QrpcjZH2%0AaWPh8nied0zVMGsS6A%3D%3D%0A) 10\. Click **Next** **\> Finish** [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-25-2775-AM.png)](https://downloads.intercomcdn.com/i/o/302711109/052f4b4695a77c70c0ab5503/image.png?expires=1752237000&signature=e7a7638c7fdbf770c1054eb30935ec7df08c1a962fa55665f6efc2fcdcfbdabb&req=dyAlEch%2FnIFWFb4f3HP0gBpdQs89%2BICXXW4e8uQndzWa9gPJo63hSJvQANAk%0AktJoD6IJzucUr0VlqQ%3D%3D%0A) ### Configure SIRP Application 1\. Log in to SIRP, then go to **Apps** from the left navigation bar. 2\. Locate the app named **Microsoft LDAP**. 3\. Enable the Microsoft LDAP app by clicking on the toggle button under the **Status** column [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-30-4207-AM.png)](https://downloads.intercomcdn.com/i/o/1095218705/6e4e6dcb3234585b05ff87a1/image.png?expires=1752237000&signature=88c6b7f582650d4945abf503e904db373dc12fe845bcd7db5ed81606b6a379a2&req=dSAuE8t%2FlYZfXPMW1HO4zUnTaCylaV4KNf6Os0ocs0nKYPHv8CaUkvHfXdPw%0A%2FZa4B2x0kGp2YGhnTR4%3D%0A) 1. A new configuration window will pop-up asking for information. Add the following details:   [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-35-3669-AM.png)](https://downloads.intercomcdn.com/i/o/1095218028/58077d506f8b84630567888d/image.png?expires=1752237000&signature=3144a92cc3431b13c9eada2d963d0672a698d84de3047a9091a3871c53ab13d7&req=dSAuE8t%2FlYFdUfMW1HO4zUtGRDcpTa59pimXDuhte%2BdGtHRk57DrzBs%2BIdob%0A0aIo6l5jw1vIlaYuubc%3D%0A) ​ You can find the distinguishedName of the user here ​ ​ [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-40-4461-AM.png)](https://downloads.intercomcdn.com/i/o/1095222075/3ec7c4402d6163b58a825592/image.png?expires=1752237000&signature=001569d6f3dd03fae5d46c6e00737e5d6c5ac13d6c79a26916b4074b4630a524&req=dSAuE8t8n4FYXPMW1HO4zdakt8i0STcJKsaT%2FX1RQnTCrE3%2BBcQR5gUBjzHe%0AiUDBcJkTuLzTdptBGK8%3D%0A) ​ Provide the following information: ​ a. Host**=\** b. USER-DN=**\** c. Password=**\** d. Base-DN=**\** e. Click on save. - [SIRP Community](https://content.sirp.io/knowledge-base/sirp-community?hsLang=en) - [Playbook Guide](https://content.sirp.io/knowledge-base/playbook-guide?hsLang=en) - [User Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#main-content) - [IM Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#im-guide) - [Admin Guide](https://content.sirp.io/knowledge-base/admin-guide?hsLang=en) - [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) - [Release Notes](https://content.sirp.io/knowledge-base/release-notes?hsLang=en) - [Add on Apps](https://content.sirp.io/knowledge-base/add-on-apps?hsLang=en) - [Architecture](https://content.sirp.io/knowledge-base/architecture?hsLang=en) - [Use Cases](https://content.sirp.io/knowledge-base/use-cases?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png "SIRP-Logo-4c-KO")](https://sirp.io) ### Global Headquarter ##### United States 7735 Old Georgetown Rd, Suite 510 Bethesda, MD 20814 [+1 888 701 9252](tel:+18887019252) [mailto:email@email.com](mailto:email@email.com) Copyright © 2025, SIRP Labs Inc