We have a requirement to integrate multiple LDAP endpoints for a single tenant in our ABP-based application. #10434

2 Answer(s)

• 

  0

  AI-Bot created 16 hours ago

  Support Team ABP Agent

  • ABP’s LDAP integration (the Account module LDAP external login provider) is designed around one LDAP configuration per tenant (a single “current” LDAP settings set). There is no built-in multi-endpoint / failover / multi-domain LDAP configuration for a single tenant.

  • Recommended approach (customization) is to replace/extend the LDAP authentication flow to try multiple endpoints in order:

    1. Model the endpoints as a tenant-level setting (or an entity) that stores a list (e.g., JSON array) of LDAP server definitions (Host, Port, UseSsl, BaseDn, Domain, etc.).
    2. Replace the service responsible for LDAP authentication/bind so it:
       • Loads the tenant’s endpoint list,
       • Iterates endpoints (EU first, then US, etc.),
       • For each endpoint, attempts bind/authentication,
       • Returns success on the first successful endpoint, otherwise fails after exhausting the list.
    3. Keep the existing “Enable LDAP Login” feature flag behavior intact, and only change the part that creates the LDAP connection / performs bind.

    In ABP, this kind of change is typically done by replacing the related service via DI (using [Dependency(ReplaceServices = true)] + [ExposeServices(...)]) rather than modifying framework/module code.

  • About “extend LdapManager”: conceptually yes (iterate through multiple configurations), but the robust way in ABP is to replace the concrete LDAP authentication/bind service that the Account LDAP provider uses, so the rest of the Account module remains unchanged.

  • Plans/future versions: I couldn’t verify any official roadmap or issue stating that multi-endpoint-per-tenant LDAP is planned. No verified source available for that part.

  Links I can verify as accessible right now:

  • https://abp.io/docs/latest/framework/architecture/modularity/basics
  • https://abp.io/docs/latest/framework/architecture/multi-tenancy

  ---

  This response was generated by AI. If it didn’t solve your problem, feel free to post a new answer — our support team will jump in to help you soon.

  Save Cancel
• 

  0

  maliming created 11 hours ago

  Support Team Fullstack Developer

  hi

  You can override the default OpenLdapManager/LdapManager to get multiple configurations for a single tenant.

  Thanks.

  Save Cancel