---
title: LDAP authentication
product: Unity Version Control
canonical: https://docs.unity.com/en-us/unity-version-control/uvcs-on-prem/authentication/ldap-auth
last_updated: 2026-11-03
generated_at: 2026-11-04T10:51:33.311Z
locale: en-us
---

# LDAP authentication

> Learn how Unity Version Control On-Prem authenticates users against an LDAP server, and find the LDAP settings you can configure.

Use Lightweight Directory Access Protocol (LDAP) authentication to authenticate Unity Version Control (UVCS) users against any LDAP server. For example, you can use a Sun ONE or iPlanet LDAP server.

## How LDAP authentication works

In LDAP mode, UVCS works as follows:

* The server gets the user list from the LDAP server, using a specified user and password.
* The server builds the security identifier (SEID) with the ID that the LDAP mechanism uses.

LDAP mode works in mixed Windows and Unix environments. For example, you can connect UVCS to an Active Directory server from a Unix machine, where the integrated Active Directory mode isn't available.

## LDAP settings

You can configure the following settings in the `server.conf` file:

|          **Setting**          |                                 **Purpose and default**                                |                              **Example**                              |
| :---------------------------: | :------------------------------------------------------------------------------------: | :-------------------------------------------------------------------: |
|      `LdapTimeoutSeconds`     |                            LDAP request timeout in seconds.                            |             `<LdapTimeoutSeconds>10</LdapTimeoutSeconds>`             |
| `LdapTokenExpirationTimeSpan` | LDAP token expiration time in the `[d.]hh:mm:ss` format. The default time is one hour. | `<LdapTokenExpirationTimeSpan>05:00:00</LdapTokenExpirationTimeSpan>` |

## Override the LDAP user filter

> **Important:**
>
> The user filter override is an advanced feature. Before you use it, contact Unity Support.

If your LDAP setup isn't compatible with the default UVCS user search filters, you can replace the filter with your own.

To specify a filter override, add the `MemberNameFilterOverride` setting to the `server.conf` file:

```xml
<LdapSettings>
    <MemberNameFilterOverride>_user_filter_</MemberNameFilterOverride>
</LdapSettings>
```

For example, LDAP setups without the UID attribute can use the filter `(|(sAMAccountName={user})(cn={user}))`.

## Additional resources

* [Active Directory authentication](./active-directory-auth.md)
* [Advanced configuration](../webadmin/advanced-config)
* [Server configuration files](../configure/server-configuration)
* [Security scenarios](../../security-scenarios)