--- title: How do I integrate with an LDAP server? description: If your organization utilized an LDAP server, you can sync the users in your active directory with Hook Security. --- [Skip to content](https://support.hooksecurity.co/how-to-integrate-with-an-ldap-server#main-content) English Show submenu for translations [Submit a Ticket](https://support.hooksecurity.co/kb-tickets/new?hsLang=en) [Customer Portal](https://support.hooksecurity.co/tickets-view?hsLang=en) [![Hook\_Logo (3)](https://support.hooksecurity.co/hs-fs/hubfs/Hook_Logo%20(3).png?width=150&height=113&name=Hook_Logo%20(3).png)](https://www.hooksecurity.co/welcome) - [Tickets](https://6535385.hs-sites.com/tickets-view) - [Sign out](https://6535385.hs-sites.com/_hcms/mem/logout) Open main navigation Close main navigation - [Tickets](https://6535385.hs-sites.com/tickets-view) - [Sign out](https://6535385.hs-sites.com/_hcms/mem/logout) - English Show submenu for translations - [Submit a Ticket](https://support.hooksecurity.co/kb-tickets/new) - [Customer Portal](https://support.hooksecurity.co/tickets-view) - [Account created in 2026 or later? Go to the Knowledge Base →](https://docs.hooksecurity.co/docs) [Account created in 2026 or later? Go to the Knowledge Base →](https://docs.hooksecurity.co/docs) Hello. How can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://support.hooksecurity.co/?hsLang=en) 2. [Getting Started](https://support.hooksecurity.co/getting-started?hsLang=en) 3. [3rd Party Integrations](https://support.hooksecurity.co/getting-started?hsLang=en#3rd-party-integrations) # How do I integrate with an LDAP server? ## If your organization utilized an LDAP server, you can sync the users in your active directory with Hook Security. LDAP configurations vary from organization to organization, so you may have to consult with your organization's Information Technology team to configure an LDAP user with the proper read permissions and set the LDAP server's security configuration to allow PhishingBox to connect. 1. Integrating an account with an LDAP server 2. Integrating a group with an LDAP server 3. Field mappings 4. Troubleshooting - *NOTE: Google Workspace LDAP service requires certificate authentication, which is not currently supported by PhishingBox. In order to connect the PhishingBox LDAP client to a Google Workspace LDAP service, you must use Stunnel as a proxy which will allow username/password authentication. See the following articles for more information.* - [Connect LDAP clients to the Secure LDAP service](https://support.google.com/a/answer/9089736) - [Use stunnel as a proxy](https://support.google.com/a/answer/9089736#stunnel) Please be aware that your domain controllers need to be accessed from the internet! #### Integrating an account with an LDAP server To get started integrating an account with an LDAP server, navigate to  **Administration \> Integration Store** in the PhishingBox portal. ![site-nav.png](https://support.phishingbox.com/hc/article_attachments/360071766171/site-nav.png) Under the card containing the LDAP logo, click the 'Setup' button. ![ldap-card.png](https://support.phishingbox.com/hc/article_attachments/360071766251/ldap-card.png) This will open the LDAP configuration form. You will need the following information to connect to the LDAP server: - The server's IP address or domain. - An open port with which to connect to the server (389 default). - An LDAP username and password that has permission to read the directory. - The base DN of the server. - The type of security protocol used to connect to the server. - The directory type. ![ldap-form.png](https://support.phishingbox.com/hc/article_attachments/360071766491/ldap-form.png) If there are more than 250 groups in the directory, then you will pick groups using a search box (as shown below). If there are 250 or fewer groups in the directory, then all the groups will be displayed for you to choose from. ![lots\_of\_groups\_ldap.PNG](https://support.phishingbox.com/hc/article_attachments/360091355612/lots_of_groups_ldap.PNG) If you want to sync to commence immediately after saving, set the 'Active' switch to 'Yes'. This will cause the sync to be queued (when a sync is "queued", that means it is scheduled to be synced in; the sync usually completes within minutes of the sync being queued, but can take longer depending on how many targets are being pulled into the Portal). When the sync is finished, an integration\_sync\_finished email will be sent to the Account Manager Email (set on the Notifications tab on the [Account Settings](https://support.phishingbox.com/hc/en-us/articles/360024055674) page). ![queued\_sync.PNG](https://support.phishingbox.com/hc/article_attachments/360091066912/queued_sync.PNG) After completing the form, choose whether you would like to sync by the server's groups, organizational units (OUs), or all users on the server (Base). Click the 'Test' button to connect to the server. If a successful connection is made and you chose to sync by group or OU, the server's groups or OUs will be displayed in a multi-select menu. Select the groups or OU's you wish to sync, then click 'Save' to save the configuration. If you chose to sync by base, no groups or OUs will need to be selected. - *NOTE: Make sure you select the correct sync type before saving! After saving, you will have to contact support to reconfigure the sync.* If the 'Active' switch is set to 'Yes' the sync will be queued. One Portal group will be created for every group or OU you chose to sync having the same name and containing all the users from the respective group or OU. If you chose to sync by Base, a single group will be created containing all users in the LDAP server named "Base".   If you did not set the 'Active' switch to 'Yes', commence the sync by clicking the 'Run Sync' link, located in the integration card's drop-down menu. This will queue the sync. You can view the results of the last time the integration was synced by clicking on "Last Sync Logs" in the drop-down. When the sync is finished, an integration\_sync\_finished email will be sent to the Account Manager Email (set on the Notifications tab on the [Account Settings](https://support.phishingbox.com/hc/en-us/articles/360024055674) page). ![last\_sync\_log\_-\_azure\_ad.PNG](https://support.phishingbox.com/hc/article_attachments/360091035071/last_sync_log_-_azure_ad.PNG) #### Integrating a group with an LDAP server To import from LDAP to a single group you will need to create a new group through the **Add Group** page, or you can edit an existing group and add the integration. Once you enter a name for the group, click on the **Third-Party Integration** tab and choose "LDAP" from the **Import Type** dropdown menu. The form fields presented for a group-level sync are identical to the fields presented in section: [Integrating an account with an LDAP server](https://support.phishingbox.com/hc/en-us/articles/360050122732-Integrating-with-an-LDAP-Server#h_01GFBCZ3FVQQGG67BN9Q73AKWM). ![mceclip0.png](https://support.phishingbox.com/hc/article_attachments/360066455873/mceclip0.png) ### Test Configuration Once you have entered the required information, click on **Test Configuration** to test the connection. If a connection is made, the number of users found in the base DN will be displayed in the Group Targets box. Additionally, new options on how you want to pull users will be displayed. You can either select the users from the base DN, a specific group, or a specific OU. If there are connection errors, they will be displayed here. ![Import\_4.PNG](https://support.phishingbox.com/hc/article_attachments/360020853134/Import_4.PNG) #### Field mappings LDAP field mappings are listed in the table below. | **Target Field** | **LDAP Field** | | --- | --- | | last\_name | sn | | first\_name | givenName | | email | mail | | title | title | | company | company | | department | department | | manager | manager | | zip | postalCode | | address\_one | streetAddress | | phone\_business | telephoneNumber | #### Troubleshooting ### Can't contact LDAP server The PhishingBox portal server cannot find the LDAP host. Ensure that the given LDAP server port is open to traffic from **54.80.160.189** (US) or **54.93.55.235** (EU). ### Cannot authenticate If the LDAP interface throws authentication errors, try using the distinguished name of the LDAP bind user in the bind user field. - [Getting Started](https://support.hooksecurity.co/getting-started?hsLang=en#main-content) - [General](https://support.hooksecurity.co/getting-started?hsLang=en#general) - [General Safelisting](https://support.hooksecurity.co/getting-started?hsLang=en#general-safelisting) - [Microsoft Safelisting](https://support.hooksecurity.co/getting-started?hsLang=en#microsoft-safelisting) - [GSuite Safelisting](https://support.hooksecurity.co/getting-started?hsLang=en#gsuite-safelisting) - [Firewall/Spam Filter Safelisting](https://support.hooksecurity.co/getting-started?hsLang=en#firewall-spam-filter-safelisting) - [Creating Groups/Adding Targets](https://support.hooksecurity.co/getting-started?hsLang=en#creating-groups-adding-targets) - [Reporting Plug-In](https://support.hooksecurity.co/getting-started?hsLang=en#reporting-plug-in) - [3rd Party Integrations](https://support.hooksecurity.co/getting-started?hsLang=en#3rd-party-integrations) - [Platform Settings](https://support.hooksecurity.co/getting-started?hsLang=en#platform-settings) - [Hook Academy](https://support.hooksecurity.co/hook-academy?hsLang=en#main-content) - [Campaign Ideas](https://support.hooksecurity.co/hook-academy?hsLang=en#campaign-ideas) - [Industry Specific Campaigns](https://support.hooksecurity.co/hook-academy?hsLang=en#industry-specific-campaigns) - [Course Reviews](https://support.hooksecurity.co/hook-academy?hsLang=en#course-reviews) - [Mastering Reporting](https://support.hooksecurity.co/hook-academy?hsLang=en#mastering-reporting) - [Becoming Compliant](https://support.hooksecurity.co/hook-academy?hsLang=en#becoming-compliant) - [Suggest a Hook Academy Topic](https://support.hooksecurity.co/hook-academy?hsLang=en#suggest-a-hook-academy-topic) - [Tests/Campaigns](https://support.hooksecurity.co/tests-campaigns?hsLang=en#main-content) - [Reseller Only](https://support.hooksecurity.co/tests-campaigns?hsLang=en#reseller-only) - [School](https://support.hooksecurity.co/school?hsLang=en#main-content) - [3rd Party Integrations](https://support.hooksecurity.co/school?hsLang=en#3rd-party-integrations) - [Troubleshooting](https://support.hooksecurity.co/school?hsLang=en#troubleshooting) - [Branding](https://support.hooksecurity.co/school?hsLang=en#branding) - [Course](https://support.hooksecurity.co/school?hsLang=en#course) - [Students](https://support.hooksecurity.co/school?hsLang=en#students) - [Automations](https://support.hooksecurity.co/school?hsLang=en#automations) - [Reports](https://support.hooksecurity.co/reports?hsLang=en#main-content) - [Generate Reports](https://support.hooksecurity.co/reports?hsLang=en#generate-reports) - [FAQs](https://support.hooksecurity.co/faqs?hsLang=en#main-content) - [Troubleshooting](https://support.hooksecurity.co/faqs?hsLang=en#troubleshooting) - [Campaign of the Month](https://support.hooksecurity.co/faqs?hsLang=en#campaign-of-the-month) - [Reseller Guide](https://support.hooksecurity.co/reseller-guide?hsLang=en) - [Hook Security Updates](https://support.hooksecurity.co/hook-security-updates?hsLang=en) - [Onboarding Guides](https://support.hooksecurity.co/onboarding-guides?hsLang=en) - [Managed Services](https://support.hooksecurity.co/managed-services?hsLang=en) - [Default HubSpot Blog](https://hooksecurity-6535385.hs-sites.com/blog) [![Newsletter\_Logo-08](https://support.hooksecurity.co/hs-fs/hubfs/Newsletter_Logo-08.png?width=250&height=59&name=Newsletter_Logo-08.png "Newsletter_Logo-08")](http://hooksecurity.co) Proudly Headquartered in Lakeland, Floirda Copyright © 2026, Hook Security Inc.