Simple LDAP Login Settings

Required

These are the most basic settings you must configure. Without these, you won't be able to use Simple LDAP Login.

Enable LDAP Authentication
Account Suffix
Often the suffix of your e-mail address. Example: @gmail.com
Base DN
Example: For subdomain.domain.suffix, use DC=subdomain,DC=domain,DC=suffix. Do not specify an OU here.
Domain Controller(s)
Separate with semi-colons.
LDAP Directory

Typical

These settings give you finer control over how logins work.

Required Groups
The groups, if any, that authenticating LDAP users must belong to.
Empty means no group required. Separate with semi-colons.
LDAP Exclusive
User Creations
New User Role

Extraordinary

Most users should leave these alone.

LDAP Login Attribute
In case your installation uses something other than uid;
Use TLS
LDAP Port
This is usually 389.
LDAP Version
Only applies to Open LDAP. Typically 3.

Help

Here's a brief primer on how to effectively use and test Simple LDAP Login.

Testing

The most effective way to test logins is to use two browsers. In other words, keep WordPress Admin open in Chrome, and use Firefox to try logging in. This will give you real time feedback on your settings and prevent you from inadvertently locking yourself out.

Which raises the question, what happens if I get locked out?

If you accidentally lock yourself out, the easiest way to get back in is to rename to something else and then refresh. WordPress will detect the change and disable Simple LDAP Login. You can then rename the folder back to its previous name.