# LDAP

<!-- BEGIN GENERATED:intro -->

The LDAP connector is a [Palantir-provided driver](../../data-integration/foundry-provided-drivers/index.md) for LDAP.

To create a new LDAP source, follow the [standard setup flow for Palantir-provided drivers](../../data-integration/foundry-provided-drivers/index.md#setup), then use the sections below for LDAP-specific configuration and networking. For the complete property reference, see the [official LDAP driver documentation ↗](https://cdn.cdata.com/help/RJK/jdbc/pg_connectionj.htm).

<!-- END GENERATED:intro -->

<!-- BEGIN GENERATED:capabilities -->

## Supported capabilities

| Capability | Status |
|---|---|
| Exploration | 🟢 Generally available |
| Batch syncs | 🟢 Generally available |
| Incremental | 🟢 Generally available |
| [Table exports](#table-exports) | 🟢 Generally available |

<!-- END GENERATED:capabilities -->

<!-- BEGIN GENERATED:configuration -->

## Configuration

The properties below are mandatory or recommended.

| Property | Required? | Description | Default |
|---|---|---|---|
| [`Server` ↗](https://cdn.cdata.com/help/RJK/jdbc/RSBLDAP_p_Server.htm) | Mandatory | Specifies the domain name or IP address of the LDAP server. This property is required to establish a connection and does not need to include the LDAP:\\\ prefix, only the server’s domain name or IP address. | `{serverAddress}` |
| [`UseSSL` ↗](https://cdn.cdata.com/help/RJK/jdbc/RSBLDAP_p_UseSSL.htm) | Mandatory | Specifies whether SSL is used to secure the connection to the LDAP server. Enabling this property ensures that communication between the client and server is encrypted. | `TRUE` |
| [`BaseDN` ↗](https://cdn.cdata.com/help/RJK/jdbc/RSBLDAP_p_BaseDN.htm) | Recommended | Specifies the base portion of the distinguished name (DN) to limit LDAP queries to a specific subtree within the directory. Using a base DN helps narrow the search scope and improve query performance, especially on large LDAP servers. | — |
| [`Password` ↗](https://cdn.cdata.com/help/RJK/jdbc/RSBLDAP_p_Password.htm) | Recommended | Specifies the password associated with the distinguished name (DN) of the user account used for authentication with the LDAP server. This property is required when the server enforces authentication. | — |
| [`Port` ↗](https://cdn.cdata.com/help/RJK/jdbc/RSBLDAP_p_Port.htm) | Recommended | Specifies the port number on which the LDAP server is running. | `636` |
| [`User` ↗](https://cdn.cdata.com/help/RJK/jdbc/RSBLDAP_p_User.htm) | Recommended | Specifies the distinguished name (DN) of the user account to be used for authentication with the LDAP server. This property is required when the server enforces authentication. | — |

<!-- END GENERATED:configuration -->

<!-- BEGIN GENERATED:networking -->

## Networking

The table below lists the domains that the source must be able to access to run.

For each domain, add a corresponding [egress policy](../../administration/configure-egress/index.md). If the source is hosted on-premises and not directly reachable from Foundry, use an [agent proxy egress policy](../../administration/configure-egress/index.md#agent-proxy-egress-policies) instead. The agent host itself must also be able to reach the listed domains. See [using an agent as a proxy](../../data-connection/agent-proxy/index.md) for details.

| Domain  | Required |
|--- |--- |
| \<Server>:\<Port> | Always. Server and Port connection properties (default `Port=389`) |

<!-- END GENERATED:networking -->

<!-- BEGIN GENERATED:table-exports -->

## Table exports

This connector supports table exports. Learn how to [set up a table export](../../data-connection/export-overview/index.md#table-exports).

<!-- END GENERATED:table-exports -->