You can define an LDAP target to be used with LDAP dynamic secrets or LDAP rotated secrets.

Create an LDAP Target from the CLI

To create an LDAP target from the CLI, run the following command:

akeyless create-ldap-target \
--name <target name> \
--ldap-url <LDAP server URL> \
--bind-dn <LDAP Bind DN with CN> \
--bind-dn-password < Password for LDAP user >

Where:

name: A unique name of the target. The name can include the path to the virtual folder where you want to create the new target, using slash / separators. If the folder does not exist, it will be created together with the target.
ldap-url: The URL of your LDAP server (e.g., ldap[s]://<hostname>:<port>)
bind-dn: The Bind DN of your LDAP user, will be used for connection setup.
bind-dn-password: The password of the LDAP user.

You can find the complete list of parameters for this command in the CLI Reference - Akeyless Targets section.

Create an LDAP Target in the Akeyless Console

Log in to the Akeyless Console, and go to Targets > New > Infra Targets > LDAP.
Define a Name of the target, and specify the Location as a path to the virtual folder where you want to create the new target, using slash / separators. If the folder does not exist, it will be created together with the target.
Define the remaining parameters as follows:

LDAP Server URL: Specify the LDAP Server URL.
CA Certificate File Content: Provide the base64-encoded CA Certificate to enable the secure connection.
LDAP Bind DN: Provide Bind DN for authentication of a privileged user.
Password for LDAP Bind DN: Provide the password of the privileged user for authentication.
Protection key: To enable Zero-Knowledge, select a key with a Customer Fragment. For more information about Zero-Knowledge, see Implement Zero Knowledge.

Click Save.