<![CDATA[EntraID / AzureAD LDAP wrapper]]>The topic has come up several times in the forum in the past: Is there an easy way to connect the Cloudron user directory to Microsoft Entra ID (formerly Azure AD) for a same signin scenario? Microsoft offers the Entra ID Domain Services with LDAP, but it involves a very complex and cost intensive setup.

I have been using the "Azure AD LDAP Wrapper" in the past which uses the Microsoft Graph API and provides an LDAP endpoint for Entra ID:
https://ahaenggli.github.io/AzureAD-LDAP-wrapper/installation/run-ldap-wrapper/

The project is quite simple and easy to install using docker or nodejs directly. I am currently running it on a seperate server with firewall rules to allow only specific ip addresses to access the LDAP port. Now, wouldn't be great if this could run as a Cloudron app itself? If it was published on the app store, one would only need to provide the Azure App registration data in an env-file and could bind the Cloudron directory to a local (private) LDAP port on the same server.

Well, I am new to packaging apps for Cloudron and have no idea how to package an app without a web interface. Heath checks would need to check the LDAP port and not HTTP, etc. Is this even a scenario wanted by the @staff?

If so, I could give packaging a try and do some testing, but would need some pointers if this can/should be realized as an app within Cloudron as it would need to expose a custom LDAP port to the internal docker stack.

]]>https://forum.cloudron.io/topic/13342/entraid-azuread-ldap-wrapperRSS for NodeThu, 17 Sep 2026 04:26:48 GMTMon, 24 Feb 2025 15:10:04 GMT60<![CDATA[Reply to EntraID / AzureAD LDAP wrapper on Sun, 13 Apr 2025 17:29:30 GMT]]>@JLX89 said in EntraID / AzureAD LDAP wrapper:

How about just using an Enterprise App with SCIM Provisioning?

That would be great ๐Ÿ™Œ

]]>https://forum.cloudron.io/post/105629https://forum.cloudron.io/post/105629Sun, 13 Apr 2025 17:29:30 GMT<![CDATA[Reply to EntraID / AzureAD LDAP wrapper on Sat, 12 Apr 2025 21:50:36 GMT]]>How about just using an Enterprise App with SCIM Provisioning?

]]>https://forum.cloudron.io/post/105603https://forum.cloudron.io/post/105603Sat, 12 Apr 2025 21:50:36 GMT<![CDATA[Reply to EntraID / AzureAD LDAP wrapper on Mon, 24 Feb 2025 18:10:06 GMT]]>@joseph said in EntraID / AzureAD LDAP wrapper:

@NCKNE said in EntraID / AzureAD LDAP wrapper:

Entra ID / Azure AD is not LDAP

TIL ๐Ÿ™‚ Had no clue, ignore my previous comment then. Just read about it a little more and it seems you need something called Azure AD DS per https://www.reddit.com/r/sysadmin/comments/120e71z/ldaps_with_azure_ad_tenant_bundled_with_office_365/

Yeah, but the Azure AD DS you mentioned is very complex and expensive (licensing costs). I just thought since the topic had come up a few time, native support of Entra ID / Azure AD might be something to consider for the future.

]]>https://forum.cloudron.io/post/102237https://forum.cloudron.io/post/102237Mon, 24 Feb 2025 18:10:06 GMT<![CDATA[Reply to EntraID / AzureAD LDAP wrapper on Mon, 24 Feb 2025 16:30:17 GMT]]>@NCKNE said in EntraID / AzureAD LDAP wrapper:

Entra ID / Azure AD is not LDAP

TIL ๐Ÿ™‚ Had no clue, ignore my previous comment then. Just read about it a little more and it seems you need something called Azure AD DS per https://www.reddit.com/r/sysadmin/comments/120e71z/ldaps_with_azure_ad_tenant_bundled_with_office_365/

]]>https://forum.cloudron.io/post/102225https://forum.cloudron.io/post/102225Mon, 24 Feb 2025 16:30:17 GMT<![CDATA[Reply to EntraID / AzureAD LDAP wrapper on Mon, 24 Feb 2025 15:41:34 GMT]]>@joseph said in EntraID / AzureAD LDAP wrapper:

AD support seems to be something we should add directly to Cloudron's existing LDAP server, if this is deemed useful. Incidentally, Cloudron's ldap server is also based on ldapjs.

Entra ID / Azure AD is not LDAPโ€ฆ thatโ€™s why either a wrapper like above is needed or Cloudron could natively implement Entra ID support (as many other apps do) and connect it to the Cloudron internal directory.

]]>https://forum.cloudron.io/post/102222https://forum.cloudron.io/post/102222Mon, 24 Feb 2025 15:41:34 GMT<![CDATA[Reply to EntraID / AzureAD LDAP wrapper on Mon, 24 Feb 2025 15:30:10 GMT]]>AD support seems to be something we should add directly to Cloudron's existing LDAP server, if this is deemed useful. Incidentally, Cloudron's ldap server is also based on ldapjs.

]]>https://forum.cloudron.io/post/102221https://forum.cloudron.io/post/102221Mon, 24 Feb 2025 15:30:10 GMT