# Sensu Go SSO w/ LDAP authentication

**URL:** <https://discourse.sensu.io/t/sensu-go-sso-w-ldap-authentication/1967>\
**Category:** Sensu Go\
**Tags:** sensu-go\
**Created:** [July 23, 2020, 11:22pm UTC](https://discourse.sensu.io/t/sensu-go-sso-w-ldap-authentication/1967 "2020-07-23T23:22:08Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![calebhailey](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.sensu.io/calebhailey/32/46_2.png) [@calebhailey](https://discourse.sensu.io/u/calebhailey)\
**Post date:** [July 23, 2020, 11:22pm UTC](https://discourse.sensu.io/t/sensu-go-sso-w-ldap-authentication/1967/1 "2020-07-23T23:22:08Z")

</div>

Recently a member of the Sensu Community Slack needed some help troubleshooting LDAP which led to a discussion we felt other Sensu users might benefit from:

 ![Screen Shot 2020-07-23 at 3.48.32 PM](https://us1.discourse-cdn.com/flex016/uploads/sensu/original/1X/61a90f3f20b57a5550b503f089daf388a4924da4.png)

Here are some key takeaways from that discussion (117 replies later 😅):

- The `ldapsearch` utility is your friend. If you’re troubleshooting connectivity issues, learning how to query an LDAP server using `ldapsearch` is very helpful. Here’s an example `ldapsearch` query to get you started:

- In earlier versions of Sensu Go (pre-5.6.0) LDAPS was not supported, but LDAPS was still possible using `stunnel`. This should no longer be required, but we noted this for posterity.

- At the end of the day, Sensu Go needs to be configured to lookup users via a configurable attribute (e.g. an email address like “[lizy@company.com](mailto:lizy@company.com)”, or just the username (e.g. “lizy”), and then it needs to know how to perform group searches (this is also configurable in Sensu Go). Here’s an example LDAP Provider template for Sensu Go and Google G Suite’s Google Cloud Identify LDAP service:

- Sensu RBAC resources offer very granular controls around how to associate SSO-authenticated users to the corresponding Role (or ClusterRole). Here’s an example RBAC profile (Role + RoleBinding) for Sensu Go:

- Finally, Sensu Go has very detailed debug logging available to help troubleshoot SSO/LDAP configuration issues. Here’s an example excerpt:

I hope this helps anyone who is just getting started with Sensu Go and need configure SSO!

[#monitoringlove](https://twitter.com/hashtag/monitoringlove)

✌