Definition
LDAP (Lightweight Directory Access Protocol) is a network protocol for accessing and maintaining distributed directory services over TCP/IP. LDAP is the foundation of Microsoft's Active Directory (AD) - the on-premisesIT infrastructure and software run locally in an organisation's own facilities and data centers. directory system that defines users, groups and access rights in most large Norwegian organisations. Although cloud-based solutions such as Entra IDMicrosoft's cloud-based identity and access management platform - formerly known as Azure Active Directory (Azure AD). (AzureMicrosoft's cloud platform - strong in the enterprise segment, especially where Office 365 and Active Directory are already in use. AD) are gaining ground, many energy companies still run on-premises Active Directory and synchronise it to the cloud via Azure AD Connect. The LDAP protocol is used to query the directory service: 'which groups does this user belong to?', 'what is the e-mail address of user X?'. For application integrationLinking of separate IT systems to exchange data and processes across organizational boundaries., LDAP/AD is the classic mechanism for centralised user administration - although SAMLSecurity Assertion Markup Language - XML-based protocol for identity federation and SSO between systems. and OIDC are now taking over for new integrations.