# Using LDAP authentication for administrators

When you use LDAP authentication for administrators, administrator accounts are linked to user accounts in an integrated external directory server. The external directory server where the user accounts are stored verifies the user credentials.

Note: To use LDAP authentication for administrators, you must have an integrated external directory server where the administrator accounts are stored.

When administrators authenticate to the Management Server, the Management Server sends the user name and password to the external directory server for authentication. The external directory server checks the user name and password against the user’s credentials in the directory. If a user group is defined for the administrator, the external directory server also checks whether the linked user account is still a member of the specified group. The external directory server responds to the Management Server whether authentication succeeds or fails.

Note: Because the user name and password are sent through the LDAP connection, we recommend using LDAPS or Start TLS when you use LDAP Authentication.