Configure APIC for LDAP access

Updated: April 15, 2026

Want to summarize with AI?

Configure APIC to enable LDAP authentication by setting up an LDAP provider and creating a login domain.

Configure APIC to use LDAP authentication for user access management.

LDAP configuration enables centralized authentication for APIC users through an external LDAP server.

Before you begin

The Cisco Application Centric Infrastructure (ACI) fabric is installed, Application Policy Infrastructure Controllers (APICs) are online, and the APIC cluster is formed and healthy.
The LDAP server host name or IP address, port, bind DN, Base DN, and password are available.
The APIC management endpoint group is available.

Procedure

In the APIC, configure the LDAP Provider.

For configuring an LDAP provider, see Create a provider.

For toggling in-band or out-of-band management in the APIC GUI:

In the Navigation pane, choose System > System Settings > APIC Connectivity Preferences. In the Work Pane select either inband or ooband.
Create the Login Domain for LDAP.

For the detailed procedure, see Create login domain using the GUI.

APIC is configured for LDAP authentication with the provider and login domain created.

What to do next

This completes the APIC LDAP configuration steps. Next, test the APIC LDAP login access.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.