Last updated on September 3, 2026
The synchronization of users from OpenLDAP is almost the same as from Active Directory. One difference is that you have to set the source_type option to openldap in the configuration file. Keep in mind that this will change some of the default attributes (e.g., username_attribute will be changed to uid).
In addition, some Directory Sync options are available only for Active Directory. In particular, exclude_disabled_users does not apply to OpenLDAP, and Active Directory change detection is not supported. If change_detection is enabled with source_type: openldap, the option is ignored, and a warning is logged.
You can see the full list of attributes in the Rublon Authentication Proxy documentation.
Note that, as of the time of writing this article, users imported from OpenLDAP by the Directory Sync feature will also have an “AD” label next to them in the Users tab.
Related Posts
How to synchronize users from Active Directory using Directory Sync