> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/configuring-user-search-for-ldap.md).

# Configuring user search for LDAP

This section describes how to set up user search for LDAP.

## Configuring user search filter

To configure the user search filter for LDAP, you must configure the **User Search Filter** and **Group Search Base** properties on the Active Directory Security Settings page. Go to [Configuring LDAP settings](/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/configuring-ldap-settings.md) for details about the security settings for LDAP and Active Directory.

## Steps

{% stepper %}
{% step %}
Sign in to Data Quality & Observability (self-hosted) and click <img src="https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-268a786d787f353b92e094a60945df32bf9cb208%2FCogwheelIcon.svg?alt=media" alt="Cogwheel icon" data-size="line"> in the left navigation pane.
{% endstep %}

{% step %}
Select **Admin Console**.
{% endstep %}

{% step %}
From User Management in the left navigation panel, select **AD Security**.
{% endstep %}

{% step %}
Select the **Connections** tab.
{% endstep %}

{% step %}
From the Connection Type dropdown menu, select **LDAP**.
{% endstep %}

{% step %}
In the **User Search Filter** input field, enter the username that was used at login. This will query the LDAP provider.

{% hint style="info" %}
The filter should include an objectClass and an additional attribute to search for. It should also include a search term, such as **uid={0}**. Go to [Configuring Security Settings (AD/LDAP)](/data-quality-self-hosted/security-configuration/configuring-security-settings-ad-ldap.md).
{% endhint %}
{% endstep %}

{% step %}
In the **Group Search Base** field, enter the base path plus the OU where the groups are located.

{% hint style="info" %}
This value is used after the user is found to exist in the LDAP, after searching with the user search filter. Go to [Configuring Security Settings (AD/LDAP)](/data-quality-self-hosted/security-configuration/configuring-security-settings-ad-ldap.md).
{% endhint %}
{% endstep %}

{% step %}
Configure the following values in either owl-env.sh or ConfigMap:

* **LDAP\_ROLES\_PROP\_NAME**
* **LDAP\_USER\_SEARCH\_ATTRIBUTE**

For the details about the owl-env.sh script settings for Search Configuration, go to [Configuring LDAP settings](/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/configuring-ldap-settings.md).
{% endstep %}
{% endstepper %}