This article addresses whether the Auth0 Active Directory/Lightweight Directory Access Protocol (AD/LDAP) Connector local admin UI supports HTTPS and outlines the best practices for securing LDAP Agent communications. The local admin UI is HTTP-only by design, but LDAPS and mutual TLS secure the connections between the connector and the LDAP server, as well as between the connector and Auth0.

• Auth0
• AD/LDAP Connector
• Security

Does the Auth0 AD/LDAP Connector support HTTPS for the local admin UI?

The local admin UI (localhost:8357) is HTTP-only by design because it operates on a loopback interface. There is no documented method to enable Transport Layer Security (TLS) or HTTPS for the local UI.

Auth0 secures external LDAP Agent communications through LDAPS and mutual TLS.

While the local UI does not support HTTPS, Auth0 secures the external communication legs. Secure the external communication legs by configuring an LDAPS URL for the server connection and issuing a mutual TLS client certificate for the Auth0 connection.

• Connector to LDAP Server: Use an ldaps:// URL along with a valid certificate to secure the connection between the connector and the LDAP server.
• Connector to Auth0: This connection uses TLS by default. For enhanced security, configure mutual TLS (mTLS) by issuing a client certificate that the connector presents on every outbound connection to Auth0.

Related References

• Install and Configure AD/LDAP Connector
• Configure AD/LDAP Connector Authentication with Client Certificates