| name |
String |
Source's display Name. |
|
| slug |
String |
Internal source name, used in URLs. |
|
| enabled |
Option<bool> |
|
[optional] |
| promoted |
Option<bool> |
When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon. |
[optional] |
| authentication_flow |
Option<uuid::Uuid> |
Flow to use when authenticating existing users. |
[optional] |
| enrollment_flow |
Option<uuid::Uuid> |
Flow to use when enrolling new users. |
[optional] |
| user_property_mappings |
Option<Vecuuid::Uuid> |
|
[optional] |
| group_property_mappings |
Option<Vecuuid::Uuid> |
|
[optional] |
| policy_engine_mode |
Option<models::PolicyEngineMode> |
|
[optional] |
| user_matching_mode |
Option<models::UserMatchingModeEnum> |
How the source determines if an existing user should be authenticated or a new user enrolled. |
[optional] |
| user_path_template |
Option<String> |
|
[optional] |
| icon |
Option<String> |
|
[optional] |
| server_uri |
String |
|
|
| peer_certificate |
Option<uuid::Uuid> |
Optionally verify the LDAP Server's Certificate against the CA Chain in this keypair. |
[optional] |
| client_certificate |
Option<uuid::Uuid> |
Client certificate to authenticate against the LDAP Server's Certificate. |
[optional] |
| bind_cn |
Option<String> |
|
[optional] |
| bind_password |
Option<String> |
|
[optional] |
| service_bind_method |
Option<models::ServiceBindMethodEnum> |
Authentication method used for LDAP synchronization and writeback. |
[optional] |
| start_tls |
Option<bool> |
|
[optional] |
| sni |
Option<bool> |
|
[optional] |
| base_dn |
String |
|
|
| additional_user_dn |
Option<String> |
Prepended to Base DN for User-queries. |
[optional] |
| additional_group_dn |
Option<String> |
Prepended to Base DN for Group-queries. |
[optional] |
| user_object_filter |
Option<String> |
Consider Objects matching this filter to be Users. |
[optional] |
| group_object_filter |
Option<String> |
Consider Objects matching this filter to be Groups. |
[optional] |
| group_membership_field |
Option<String> |
Field which contains members of a group. |
[optional] |
| user_membership_attribute |
Option<String> |
Attribute which matches the value of group_membership_field. |
[optional] |
| object_uniqueness_field |
Option<String> |
Field which contains a unique Identifier. |
[optional] |
| password_login_update_internal_password |
Option<bool> |
Update internal authentik password when login succeeds with LDAP |
[optional] |
| sync_users |
Option<bool> |
|
[optional] |
| sync_users_password |
Option<bool> |
When a user changes their password, sync it back to LDAP. This can only be enabled on a single LDAP source. |
[optional] |
| sync_groups |
Option<bool> |
|
[optional] |
| sync_parent_group |
Option<uuid::Uuid> |
|
[optional] |
| lookup_groups_from_user |
Option<bool> |
Lookup group membership based on a user attribute instead of a group attribute. This allows nested group resolution on systems like FreeIPA and Active Directory |
[optional] |
| delete_not_found_objects |
Option<bool> |
Delete authentik users and groups which were previously supplied by this source, but are now missing from it. |
[optional] |
| sync_outgoing_trigger_mode |
Option<models::SyncOutgoingTriggerModeEnum> |
When to trigger sync for outgoing providers |
[optional] |
| sync_group_hierarchy |
Option<bool> |
Sync group parentage/hierarchy from LDAP directories. |
[optional] |