> For the complete documentation index, see [llms.txt](https://help.glpi-project.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.glpi-project.org/tutorials/authentication/authentification-with-local-ldap.md).

# Authenticate with local LDAP

In this article, we will expose solutions to benefit from your local LDAP authentication on your GLPI Network Cloud instance.

## Opening your local directory

To benefit from your local LDAP directory, it is necessary to make it accessible from Internet.

That passes by the installation, on your infrastructure, of protocol LDAPS what will allow your directory LDAP and your instance GLPI Network Cloud to communicate in a protected way.

According to your infrastructure, it is also interesting to set up filtering to guarantee that only your instance GLPI Network Cloud can attack your LDAP directory from outside. ( IP address of your instance here )

1. You must prepare your environment for the use of the LDAPS protocol;
   1. LDAPS protocol enabled/accepted (depending on your environment);
   2. Port 636 open/accepted on your network from Internet/your GLPI Network Cloud instance.
2. You can finally configure the LDAP(S) authentication in your GLPI Network Cloud instance.

## Synchronize your local directory on a Cloud directory (Azure AD)

This adds an intermediary and requires more configuration but allows you to benefit from your local directory if you do not want to expose it directly.

1. Subscribe to Azure AD
2. Synchronize your local directory with Azure AD;
3. Choose an authentication method for your GLPI Network Cloud instance (LDAPS or Oauth SSO -> [our guide](/tutorials/authentication/cloud_azure_ad.md)).

## Dedicated VPN via the subscription of a GLPI Network Cloud Private offer

Subscribing to a GLPI Network Cloud Private offer will allow you to call upon our team to set up a dedicated VPN between your GLPI Network Cloud instance and your infrastructure.

1. Subscribe to a GLPI Network Cloud Private offer;
2. Migration or deployment of your private instance;
3. Ask for the implementation of a dedicated VPN;
4. Planning / Implementation / Validation of the VPN with a technician of our team.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.glpi-project.org/tutorials/authentication/authentification-with-local-ldap.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.