Skip to main content

Verify a TLS-protected LDAP/AD password and issue a local session

POST 
/api/v1/auth/ldap/:provider_id/session

Requires same-origin JSON. The password is verified only against the configured TLS-protected directory and then zeroized. An unknown identity is admitted only through the provider's invitation or required-group policy before Jiandu issues its own opaque session.

Request​

Responses​

Opaque local browser session issued

Response Headers
    Cache-Control

    Always no-store

    Set-Cookie

    Opaque host-only HttpOnly SameSite=Strict Jiandu session cookie

    X-Request-Id

    Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.

Last updated on