---
title: Configuring LDAP authentication in Factry Historian
slug: how-tos/o7he-configure-ldap
docTags: yQHN1KQ9YUOIZkI1PeV3Y
createdAt: 2025-09-02T15:15:27.655Z
---

## Requirements

Before starting, make sure you have:

- [Administrator privileges](docId\:K2NnYEcUxqQsiuCLmpfKH) in Factry Historian
- [Retrieved the LDAP credentials](docId\:jhGOacGdOWPR5dfB-cLIs)
- Connection to LDAP server

## Configure authentication provider

1. In Factry Historian, go to: **Configuration > Server Settings > Authentication providers** and click **+ Create provider**.
2. Give your new Authentication provider a Name and optional Description. Select `LDAP` as Authentication provider type.
3. Check the "Enabled" checkbox to enable the authentication provider.
4. Fill in your LDAP connection [details](docId\:jhGOacGdOWPR5dfB-cLIs):
   - Make sure to add the brackets `(` and `)` around the **search filter** field.
5. Click **Save & test** to verify the configuration.

If the connection is successful, you will return to the Authentication providers overview. The icon next to the authentication provider you created should turn green.

:::hint{type="info"}
Having issues configuring the authentication provider, or the authentication provider does not turn green? Have a look in [Troubleshooting LDAP authentication](docId\:wk5CkWzCILSVYy4xxz-lh).
:::

![](https://api.archbee.com/api/optimize/5fbu7Arve_PpG6EAsx3L9-0-tQ5RfA0hMltAMVWkQRe-20250904-085043.png)

## Configure group mapping for LDAP

In Factry Historian, go to **Configuration > Server Settings > Authentication providers** and select the LDAP authentication provider to enable group mapping for it.

:::hint{type="info"}
When group mapping is enabled on the authentication provider, a user in Factry Historian can not be manually configured into a user group, since on each login the user will be linked to the user groups matching the authentication provider. To manually assign users to groups in Factry Historian, skip this section.
:::

1. In the LDAP server, find the DN of the group(s) with identities (users) you want to give permissions in Factry Historian.
2. In Factry Historian, go to **Configuration > Groups** and click the edit icon of the user group that you want to map.
3. In the Manage user group screen, Click **+ Create user group mapping**. Enter the DN from Step 1 in the Name field. Then, select the Authentication provider from the dropdown menu.
4. Click **Submit**.

![](https://api.archbee.com/api/optimize/5fbu7Arve_PpG6EAsx3L9-kmqNQf6HnG3cBTSPk6Ji6-20250904-130200.png)

On saving a user group mapping, all the identities (users) in the LDAP group(s) matching the given DN will be granted the permissions of the mapped Factry Historian user group.

:::hint{type="success"}
We recommend to continue by configuring a user group mapping for each user group in Factry Historian: Administrators, Managers and Readers.
:::

## Test authentication and group mapping

To test the authentication and group mapping:

1. Log out of Factry Historian.
2. Select the LDAP authentication provider in the login screen.
3. Log in with your LDAP username or e-mail (depends on the `search filter`).
4. Verify:
   - If login succeeds without errors.
   - If the correct user groups are applied to the user in Factry Historian.

When successfully logging in with an LDAP user in Factry Historian, the user will be automatically created in Factry Historian (if it does not exist yet).

:::hint{type="info"}
Having issues logging in or testing group mapping? Have a look in [Troubleshooting LDAP authentication](docId\:wk5CkWzCILSVYy4xxz-lh).
:::