<!--
{
  "availability" : [
    "iOS: 15.0.0 -",
    "iPadOS: 15.0.0 -",
    "macCatalyst: 15.0.0 -",
    "macOS: 13.0.0 -",
    "visionOS: 1.1.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "DeviceManagement",
  "identifier" : "/documentation/DeviceManagement/AccountLDAP",
  "metadataVersion" : "0.1.0",
  "role" : "Object",
  "symbol" : {
    "kind" : "Object",
    "modules" : [
      "Device Management"
    ],
    "preciseIdentifier" : "rmdm-declarations:AccountLDAP"
  },
  "title" : "AccountLDAP"
}
-->

# AccountLDAP

The declaration to configure a Lightweight Directory Access Protocol (LDAP) account.

```
object AccountLDAP
```

## Discussion

Specify `com.apple.configuration.account.ldap` as the declaration type.

### Configuration availability

|||
|--------------------------------|----------------------------------------------|
|Allowed in supervised enrollment|iOS, macOS, Shared iPad, visionOS             |
|Allowed in device enrollment    |iOS, Shared iPad, visionOS                    |
|Allowed in user enrollment      |iOS, macOS, Shared iPad, visionOS             |
|Allowed in local enrollment     |iOS, macOS, Shared iPad, visionOS             |
|Allowed in system scope         |iOS, visionOS                                 |
|Allowed in user scope           |macOS, Shared iPad                            |
|Apply                           |Multiple configurations are applied separately|

### Configuration example

This configuration sets up an LDAP directory account.

```json
{
    "Type": "com.apple.configuration.account.ldap",
    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
    "Payload": {
        "VisibleName": "Work Directory",
        "HostName": "ldap.example.com",
        "SearchSettings": [
            {
                "VisibleName": "Search Work",
                "SearchBase": "dc=example,dc=com",
                "Scope": "Subtree"
            }
        ]
    }
}
```

## Topics

### Objects

[`AccountLDAPSearchSettingsItemObject`](/documentation/DeviceManagement/AccountLDAPSearchSettingsItemObject)

The array of nodes to start LDAP searches from. There must be at least one node for this account to be useful. macOS only searches one node and ignores other items in the array.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)