---
title: Enabling LDAP for Azure AD DS
slug: kronpam-how-to-guides/enabling-ldap-for-azure-ad-ds
description: Learn how to enable secure LDAP on an Azure AD DS managed domain with clear instructions and step-by-step guidance. This document covers enabling secure LDAP access, configuring a network security group for restricted access, and decrypting a .PFX file fo
docTags: 
createdAt: 2022-08-17T13:38:33.000Z
---

To enable secure LDAP on an Azure AD DS managed domain:

1. In the Azure Portal, search for *Domain Services* and select **Azure AD Domain Services** from the search result
2. Choose the managed domain and select the **Secure LDAP** option on the left-hand side of the Azure AD DS window
3. By default, Secure LDAP access to your managed domain is disabled. Toggle the **Secure LDAP** option to **Enable **- when public secure LDAP access is enabled, your domain is vulnerable to password attacks over the internet. In the next step, a network security group is configured to lock down access to only the required source IP address ranges
4. Toggle the **Allow secure LDAP access over the internet** option to **Enable**
5. Select the folder icon next to the .PFX file with secure LDAP certificate. Browse to the .PFX file path, then select the certificate you had before. Enter the password to decrypt the .PFX file set in the step where the certificate was exported to a .PFX file
6. Select **Save** to enable secure LDAP 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/En1UMQzpCdYxHtAOJEfgK_image.png "Enabling Secure LDAP on Azure AD")