{"id":27527,"date":"2025-12-12T09:28:52","date_gmt":"2025-12-12T08:28:52","guid":{"rendered":"https:\/\/churchtools.academy\/help\/non-knowledgebase\/uncategorized\/ldap-integration\/"},"modified":"2026-02-02T09:18:53","modified_gmt":"2026-02-02T08:18:53","password":"","slug":"ldap-integration","status":"publish","type":"docs","link":"https:\/\/churchtools.academy\/en\/help\/system-settings\/ldap-login-systemsettings\/ldap-integration\/","title":{"rendered":"LDAP Integration"},"content":{"rendered":"\n<p>If an LDAP server is available in the congregation, users can be authenticated against it. This means that separate passwords are no longer required in ChurchTools, but the user can use their password for the entire system environment. <\/p>\n\n\n\n<p>Alternatively, ChurchTools can also provide its own <a href=\"https:\/\/churchtools.academy\/en\/help\/system-settings\/ldap-login-systemsettings\/ldap-service\/\">LDAP service<\/a>, against which other systems can then be authenticated.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Process<\/h2>\n\n\n\n<p>ChurchTools first connects via user:password@server to gain access to the content of the LDAP server. Then the user is searched for by e-mail or user name and finally the user himself is attempted to be authenticated.  <\/p>\n\n\n\n<p>If successful, it checks whether the user is already registered in ChurchTools. If not, the user is newly created.  <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Setup<\/h2>\n\n\n\n<p>ChurchTools supports access to the LDAP server via LDAP, LDAP with START-TLS, or LDAPS. If you want to use your own LDAP server, our support can set it up for you in your ChurchTools. The following data is required for this:  <\/p>\n\n\n\n<p><code>; URI zu dem LDAP Server sowie Benutzername und Passwort f\u00fcr den Zugriff auf den LDAP-Server<br>ldap_config[server]=\"ldap:\/\/ldapserver.de:389\"<br><br>; alternativ mit START-TLS:<br>ldap_config[server]=\"ldap:\/\/ldapserver.de:389\"<br>ldap_config[tls]=1<br><br>; alternativ mit LDAPS:<br>ldap_config[server]=\"ldaps:\/\/ldapserver.de:636\"<br><br>ldap_config[user]=\"uid=XXX,cn=users,dc=churchtools,dc=de\"<br>ldap_config[password]=XXX<br><br>; Base-DN aller Nutzer, in denen mit dem Filter unten gesucht werden soll<br>ldap_config[basedn]=\"cn=users,dc=churchtools,dc=de\"<br><br>; Filter, um nach dem richtigen Benutzer anhand von E-Mail oder Benutzername zu suchen<br>ldap_config[filter_mail]=\"(mail=%u)\"<br>ldap_config[filter_username]=\"(uid=%u)\"<br><br>; LDAP-Felder f\u00fcr die einzelnen Felder in Personen. Hinter dem \"=\" stehen die Feldnamen, die vom LDAP-Server zur\u00fcckgegeben werden.<br>ldap_config[mail]=mail<br>ldap_config[givenname]=givenname<br>ldap_config[name]=sn<br>ldap_config[username]=uid<br><br>; Wenn ein User nicht in Personen vorhanden ist wird er angelegt. Hier werden daf\u00fcr Bereich, Personenstatus und Standort festgelegt.<br>ldap_config[create_dep]=1<br>ldap_config[create_status]=1<br>ldap_config[create_station]=0; (station = Standort)<\/code><\/p>\n\n\n\n<aside class=\"wp-block-group ct-artikel-zum-weiterlesen has-background is-layout-constrained wp-container-core-group-is-layout-89fd719a wp-block-group-is-layout-constrained\" style=\"border-radius:8px;background-color:#f9fafb;margin-top:24px;margin-bottom:24px;padding-top:32px;padding-right:24px;padding-bottom:32px;padding-left:24px\">\n<h2 class=\"wp-block-heading has-medium-font-size\">Artikel zum Weiterlesen<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/churchtools.academy\/de\/help\/verwaltung\/ldap\/0-ldap\/\" data-type=\"docs\" data-id=\"7394\">\u00dcberblick LDAP<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/churchtools.academy\/de\/help\/verwaltung\/ldap\/0-ldap-service\/\" data-type=\"docs\" data-id=\"7397\">LDAP-Service<\/a><\/li>\n<\/ul>\n<\/aside>\n","protected":false},"excerpt":{"rendered":"<p>If an LDAP server is available in the congregation, users can be authenticated against it. This means that separate passwords are no longer required in ChurchTools, but the user can use their password for the entire system environment. Alternatively, ChurchTools can also provide its own LDAP service, against which other systems can then be authenticated. [&hellip;]<\/p>\n","protected":false},"author":43,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"doc_category":[475,475],"doc_tag":[653],"knowledge_base":[425],"class_list":{"0":"post-27527","1":"docs","2":"type-docs","3":"status-publish","4":"hentry","5":"doc_category-ldap-login-systemsettings","7":"doc_tag-content-outdated-en","8":"knowledge_base-system-settings"},"pp_statuses_selecting_workflow":false,"pp_workflow_action":"current","pp_status_selection":"publish","acf":[],"year_month":"2026-04","word_count":328,"total_views":"2095","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Stefan Krumsdorf","author_nicename":"skrumsdorf","author_url":"https:\/\/churchtools.academy\/en\/author\/skrumsdorf\/"},"doc_category_info":[{"term_name":"LDAP","term_url":"https:\/\/churchtools.academy\/en\/help\/system-settings\/ldap-login-systemsettings\/"},{"term_name":"LDAP","term_url":"https:\/\/churchtools.academy\/en\/help\/system-settings\/ldap-login-systemsettings\/"}],"doc_tag_info":[{"term_name":"Content outdated","term_url":"https:\/\/churchtools.academy\/en\/docs-tag\/content-outdated-en\/"}],"knowledge_base_info":[{"term_name":"System Settings","term_url":"https:\/\/churchtools.academy\/en\/help\/system-settings\/","term_slug":"system-settings"}],"knowledge_base_slug":["system-settings"],"_links":{"self":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/27527","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/comments?post=27527"}],"version-history":[{"count":14,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/27527\/revisions"}],"predecessor-version":[{"id":47511,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/27527\/revisions\/47511"}],"wp:attachment":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/media?parent=27527"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/doc_category?post=27527"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/doc_tag?post=27527"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/knowledge_base?post=27527"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}