Search Results :


Update Users in the LDAP server

Update LDAP user entry on Drupal account edit

This document will guide you through the steps required to configure the Drupal LDAP Provisioning. When the Drupal user account is updated, it automatically updates the corresponding LDAP entry on the configured LDAP server. Plus, you can sync Drupal groups and roles with LDAP groups, simplifying user synchronization between LDAP and Drupal.

You can also explore the guide on automatically creating an LDAP entry from a Drupal account when a new user registers on your Drupal site.

The Update User Entry in LDAP/Active Directory Server feature enables you to provision your users based on the following events::

  • Admin Interface:- When administrators or privileged users manually update a user’s account via the Drupal admin interface.
  • User account change:- Whenever users themselves modify their own information like email or username etc. from user/user_id/edit or any other custom form.
  • 3rd Party Modules:- Whenever a user entity is updated in the Drupal site using any third-party modules/applications or using custom code.


Steps to configure LDAP provisioning (User update):

  • After the successful configuration of the module navigate to the LDAP Provisioning tab of the module
  • Drupal LDAP/Active Directory Integration - Navigate to LDAP Provisioning tab
  • Enable the Update user information in Active Directory/LDAP when user information is updated in the Drupal checkbox.
  • Drupal LDAP/Active Directory Integration - Enabling the checkbox of Update user information in Active Directory/LDAP
  • Click on the Save Configuration button.

Note: You have the option to map Drupal user information like fields, roles, and groups with specific LDAP attributes that you wish to modify in the LDAP server. This can be done in the Attribute & Role Mapping tab of the module (admin/config/people/ldap_auth/attribute_mapping). This will automatically update your users' LDAP records based on the saved configuration. For more details, refer to the Attribute Mapping, Role Mapping, and Group Mapping guide.

Drupal LDAP/Active Directory Integration - Map Drupal user information such as roles, groups and fields

For example, as shown in the image above, we've mapped LDAP's userprincipalname with Drupal's mail field and givenname with Drupal's custom field firstname. This means that if we make changes to a user's email and first name in Drupal, those updates will automatically reflect in the LDAP/Active Directory server for the user's 'userprincipalname' and 'givenname'.

Let’s see how this works:

Let us assume that we want to update a user doejohn on the Drupal site as well as on the LDAP/Active Directory server.

  • Login to your Drupal site with the admin credentials.
  • After logging in as an admin, go to the People section of your site (admin/people). Locate the user whose details you wish to modify and click the Edit button (/user/{user_id}/edit)
  • Drupal LDAP/Active Directory Integration - Go to the People and click on Save button
  • Now update the user information as per your requirement and click on the Save button.
  • Drupal LDAP/Active Directory Integration - After updating the user information to your specifications, click the Save button

Congratulations, you have successfully updated the user’s (doejohn in our case) information in both Drupal and your LDAP server. You can confirm it from your LDAP server.

If you don't have access to your LDAP server then you can confirm the same by checking the user LDAP entry.

Get user LDAP Entry:

  • Navigate to the LDAP Configuration tab of the module and scroll down to the Test Authentication section. Enter the username and password of the user that we updated earlier (doejohn in our case) and click on the Test Configuration button (admin/config/people/ldap_auth/ldap_config#test_authentication).
  • Drupal LDAP/Active Directory Integration - Under LDAP Configuration, scroll the Test Authentication section and provide the username and password into the fields
  • After a successful Test Configuration, click the Get Your LDAP Attributes to check the user’s LDAP entry.
  • Drupal LDAP/Active Directory Integration - If connection is successful, click on Get Your LDAP Attributes button
  • You can see that the user’s userprincipalname and givenmane in LDAP have been updated to match the Drupal 'mail' and 'firstname' fields respectively.
  • Drupal LDAP/Active Directory Integration - The below user information userprincipalname and givenmane has been updated in the given fields in the Received LDAP Attribute popup.

We hope that you find this guide useful and easy to configure.

If you want a 7-day fully-featured trial or have any questions or in case you need any sort of assistance in setting up the module according to your use case, please feel free to drop us an email at

Hello there!

Need Help? We are right here!

Contact miniOrange Support

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to