fix: addressed requested changes

backend/src/@types/fastify.d.ts

@@ -152,7 +152,7 @@ declare module "fastify" {
       identityId: string;
       user: {
         uid: string;
-        mail: string;
+        mail?: string;
       };
     };
     kmipUser: {

backend/src/db/migrations/20250507003056_identity-ldap-auth.ts

@@ -23,7 +23,6 @@ export async function up(knex: Knex): Promise<void> {
       t.string("url").notNullable();
       t.string("searchBase").notNullable();
       t.string("searchFilter").notNullable();
-      t.string("uniqueAttribute").notNullable();
 
       t.jsonb("allowedFields").nullable();
 

backend/src/db/schemas/identity-ldap-auths.ts

@@ -22,7 +22,6 @@ export const IdentityLdapAuthsSchema = z.object({
   url: z.string(),
   searchBase: z.string(),
   searchFilter: z.string(),
-  uniqueAttribute: z.string(),
   allowedFields: z.unknown().nullable().optional(),
   createdAt: z.date(),
   updatedAt: z.date()

backend/src/ee/services/audit-log/audit-log-types.ts

@@ -1056,7 +1056,7 @@ interface LoginIdentityLdapAuthEvent {
   metadata: {
     identityId: string;
     ldapUsername: string;
-    ldapEmail: string;
+    ldapEmail?: string;
   };
 }
 

backend/src/lib/api-docs/constants.ts

@@ -185,6 +185,49 @@ export const UNIVERSAL_AUTH = {
   }
 } as const;
 
+export const LDAP_AUTH = {
+  LOGIN: {
+    identityId: "The ID of the identity to login.",
+    username: "The username of the LDAP user to login.",
+    password: "The password of the LDAP user to login."
+  },
+  ATTACH: {
+    identityId: "The ID of the identity to attach the configuration onto.",
+    url: "The URL of the LDAP server.",
+    allowedFields:
+      "The comma-separated array of key/value pairs of required fields that the LDAP entry must have in order to authenticate.",
+    searchBase: "The base DN to search for the LDAP user.",
+    searchFilter: "The filter to use to search for the LDAP user.",
+    bindDN: "The DN of the user to bind to the LDAP server.",
+    bindPass: "The password of the user to bind to the LDAP server.",
+    ldapCaCertificate: "The PEM-encoded CA certificate for the LDAP server.",
+    accessTokenTTL: "The lifetime for an access token in seconds.",
+    accessTokenMaxTTL: "The maximum lifetime for an access token in seconds.",
+    accessTokenNumUsesLimit: "The maximum number of times that an access token can be used.",
+    accessTokenTrustedIps: "The IPs or CIDR ranges that access tokens can be used from."
+  },
+  UPDATE: {
+    identityId: "The ID of the identity to update the configuration for.",
+    url: "The new URL of the LDAP server.",
+    allowedFields: "The comma-separated list of allowed fields to return from the LDAP user.",
+    searchBase: "The new base DN to search for the LDAP user.",
+    searchFilter: "The new filter to use to search for the LDAP user.",
+    bindDN: "The new DN of the user to bind to the LDAP server.",
+    bindPass: "The new password of the user to bind to the LDAP server.",
+    ldapCaCertificate: "The new PEM-encoded CA certificate for the LDAP server.",
+    accessTokenTTL: "The new lifetime for an access token in seconds.",
+    accessTokenMaxTTL: "The new maximum lifetime for an access token in seconds.",
+    accessTokenNumUsesLimit: "The new maximum number of times that an access token can be used.",
+    accessTokenTrustedIps: "The new IPs or CIDR ranges that access tokens can be used from."
+  },
+  RETRIEVE: {
+    identityId: "The ID of the identity to retrieve the configuration for."
+  },
+  REVOKE: {
+    identityId: "The ID of the identity to revoke the configuration for."
+  }
+} as const;
+
 export const AWS_AUTH = {
   LOGIN: {
     identityId: "The ID of the identity to login.",

backend/src/server/routes/v1/identity-ldap-auth-router.ts

@@ -15,7 +15,7 @@ import { z } from "zod";
 
 import { IdentityLdapAuthsSchema } from "@app/db/schemas/identity-ldap-auths";
 import { EventType } from "@app/ee/services/audit-log/audit-log-types";
-import { ApiDocsTags } from "@app/lib/api-docs";
+import { ApiDocsTags, LDAP_AUTH } from "@app/lib/api-docs";
 import { getConfig } from "@app/lib/config/env";
 import { UnauthorizedError } from "@app/lib/errors";
 import { logger } from "@app/lib/logger";
@@ -45,6 +45,7 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
           ...ldapConfig,
           isActive: true,
           groupSearchBase: "",
+          uniqueUserAttribute: "",
           groupSearchFilter: ""
         };
 
@@ -120,9 +121,9 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
       tags: [ApiDocsTags.LdapAuth],
       description: "Login with LDAP Auth",
       body: z.object({
-        identityId: z.string().trim(),
+        identityId: z.string().trim().describe(LDAP_AUTH.LOGIN.identityId),
-        username: z.string(),
+        username: z.string().describe(LDAP_AUTH.LOGIN.username),
-        password: z.string()
+        password: z.string().describe(LDAP_AUTH.LOGIN.password)
       }),
       response: {
         200: z.object({
@@ -147,11 +148,7 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
     },
 
     handler: async (req) => {
-      if (
+      if (!req.passportMachineIdentity?.identityId || !req.passportMachineIdentity.user.uid) {
-        !req.passportMachineIdentity?.identityId ||
-        !req.passportMachineIdentity.user.mail ||
-        !req.passportMachineIdentity.user.uid
-      ) {
         throw new UnauthorizedError({ message: "Invalid request. Missing identity ID or LDAP entry details." });
       }
 
@@ -200,29 +197,40 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
         }
       ],
       params: z.object({
-        identityId: z.string().trim()
+        identityId: z.string().trim().describe(LDAP_AUTH.ATTACH.identityId)
       }),
       body: z
         .object({
-          url: z.string().trim().min(1),
+          url: z.string().trim().min(1).describe(LDAP_AUTH.ATTACH.url),
-          bindDN: z.string().trim().min(1),
+          bindDN: z.string().trim().min(1).describe(LDAP_AUTH.ATTACH.bindDN),
-          bindPass: z.string().trim().min(1),
+          bindPass: z.string().trim().min(1).describe(LDAP_AUTH.ATTACH.bindPass),
-          searchBase: z.string().trim().min(1),
+          searchBase: z.string().trim().min(1).describe(LDAP_AUTH.ATTACH.searchBase),
-          uniqueAttribute: z.string().trim().min(1).default("uidNumber"),
+          searchFilter: z.string().trim().min(1).default("(uid={{username}})").describe(LDAP_AUTH.ATTACH.searchFilter),
-          searchFilter: z.string().trim().min(1).default("(uid={{username}})"),
+          allowedFields: AllowedFieldsSchema.array().optional().describe(LDAP_AUTH.ATTACH.allowedFields),
-          allowedFields: AllowedFieldsSchema.array().optional(),
+          ldapCaCertificate: z.string().trim().optional().describe(LDAP_AUTH.ATTACH.ldapCaCertificate),
-          ldapCaCertificate: z.string().trim().optional(),
-
           accessTokenTrustedIps: z
             .object({
               ipAddress: z.string().trim()
             })
             .array()
             .min(1)
-            .default([{ ipAddress: "0.0.0.0/0" }, { ipAddress: "::/0" }]),
+            .default([{ ipAddress: "0.0.0.0/0" }, { ipAddress: "::/0" }])
-          accessTokenTTL: z.number().int().min(0).max(315360000).default(2592000),
+            .describe(LDAP_AUTH.ATTACH.accessTokenTrustedIps),
-          accessTokenMaxTTL: z.number().int().min(1).max(315360000).default(2592000),
+          accessTokenTTL: z
-          accessTokenNumUsesLimit: z.number().int().min(0).default(0)
+            .number()
+            .int()
+            .min(0)
+            .max(315360000)
+            .default(2592000)
+            .describe(LDAP_AUTH.ATTACH.accessTokenTTL),
+          accessTokenMaxTTL: z
+            .number()
+            .int()
+            .min(1)
+            .max(315360000)
+            .default(2592000)
+            .describe(LDAP_AUTH.ATTACH.accessTokenMaxTTL),
+          accessTokenNumUsesLimit: z.number().int().min(0).default(0).describe(LDAP_AUTH.ATTACH.accessTokenNumUsesLimit)
         })
         .refine(
           (val) => val.accessTokenTTL <= val.accessTokenMaxTTL,
@@ -286,27 +294,38 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
         }
       ],
       params: z.object({
-        identityId: z.string()
+        identityId: z.string().trim().describe(LDAP_AUTH.UPDATE.identityId)
       }),
       body: z
         .object({
-          url: z.string().trim().min(1),
+          url: z.string().trim().min(1).describe(LDAP_AUTH.UPDATE.url),
-          bindDN: z.string().trim().min(1),
+          bindDN: z.string().trim().min(1).describe(LDAP_AUTH.UPDATE.bindDN),
-          bindPass: z.string().trim().min(1),
+          bindPass: z.string().trim().min(1).describe(LDAP_AUTH.UPDATE.bindPass),
-          searchBase: z.string().trim().min(1),
+          searchBase: z.string().trim().min(1).describe(LDAP_AUTH.UPDATE.searchBase),
-          uniqueAttribute: z.string().trim().min(1).default("uidNumber"),
+          searchFilter: z.string().trim().min(1).default("(uid={{username}})").describe(LDAP_AUTH.UPDATE.searchFilter),
-          searchFilter: z.string().trim().min(1).default("(uid={{username}})"),
+          allowedFields: AllowedFieldsSchema.array().optional().describe(LDAP_AUTH.UPDATE.allowedFields),
-          allowedFields: AllowedFieldsSchema.array().optional(),
           accessTokenTrustedIps: z
             .object({
               ipAddress: z.string().trim()
             })
             .array()
             .min(1)
-            .optional(),
+            .optional()
-          accessTokenTTL: z.number().int().min(0).max(315360000).optional(),
+            .describe(LDAP_AUTH.UPDATE.accessTokenTrustedIps),
-          accessTokenNumUsesLimit: z.number().int().min(0).optional(),
+          accessTokenTTL: z.number().int().min(0).max(315360000).optional().describe(LDAP_AUTH.UPDATE.accessTokenTTL),
-          accessTokenMaxTTL: z.number().int().max(315360000).min(0).optional()
+          accessTokenNumUsesLimit: z
+            .number()
+            .int()
+            .min(0)
+            .optional()
+            .describe(LDAP_AUTH.UPDATE.accessTokenNumUsesLimit),
+          accessTokenMaxTTL: z
+            .number()
+            .int()
+            .max(315360000)
+            .min(0)
+            .optional()
+            .describe(LDAP_AUTH.UPDATE.accessTokenMaxTTL)
         })
         .refine(
           (val) => (val.accessTokenMaxTTL && val.accessTokenTTL ? val.accessTokenTTL <= val.accessTokenMaxTTL : true),
@@ -370,7 +389,7 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
         }
       ],
       params: z.object({
-        identityId: z.string()
+        identityId: z.string().trim().describe(LDAP_AUTH.RETRIEVE.identityId)
       }),
       response: {
         200: z.object({
@@ -427,7 +446,7 @@ export const registerIdentityLdapAuthRouter = async (server: FastifyZodProvider)
         }
       ],
       params: z.object({
-        identityId: z.string()
+        identityId: z.string().trim().describe(LDAP_AUTH.REVOKE.identityId)
       }),
       response: {
         200: z.object({

backend/src/services/identity-ldap-auth/identity-ldap-auth-service.ts

@@ -88,7 +88,6 @@ export const identityLdapAuthServiceFactory = ({
       url: ldapAuth.url,
       bindDN,
       bindPass,
-      uniqueUserAttribute: ldapAuth.uniqueAttribute,
       searchBase: ldapAuth.searchBase,
       searchFilter: ldapAuth.searchFilter,
       caCert: ldapCaCertificate || "",
@@ -100,9 +99,8 @@ export const identityLdapAuthServiceFactory = ({
         url: ldapAuth.url,
         bindDN,
         bindCredentials: bindPass,
-        uniqueUserAttribute: ldapAuth.uniqueAttribute,
         searchBase: ldapAuth.searchBase,
-        searchFilter: ldapAuth.searchFilter || "(uid={{username}})",
+        searchFilter: ldapAuth.searchFilter,
         ...(ldapCaCertificate
           ? {
               tlsOptions: {
@@ -178,7 +176,6 @@ export const identityLdapAuthServiceFactory = ({
     url,
     searchBase,
     searchFilter,
-    uniqueAttribute,
     bindDN,
     bindPass,
     ldapCaCertificate,
@@ -287,7 +284,6 @@ export const identityLdapAuthServiceFactory = ({
           encryptedBindPass,
           searchBase,
           searchFilter,
-          uniqueAttribute,
           url,
           encryptedLdapCaCertificate,
           accessTokenMaxTTL,
@@ -308,7 +304,6 @@ export const identityLdapAuthServiceFactory = ({
     url,
     searchBase,
     searchFilter,
-    uniqueAttribute,
     bindDN,
     bindPass,
     ldapCaCertificate,
@@ -428,7 +423,6 @@ export const identityLdapAuthServiceFactory = ({
       url,
       searchBase,
       searchFilter,
-      uniqueAttribute,
       encryptedBindDN,
       encryptedBindPass,
       encryptedLdapCaCertificate,

backend/src/services/identity-ldap-auth/identity-ldap-auth-types.ts

@@ -17,7 +17,6 @@ export type TAttachLdapAuthDTO = {
   url: string;
   searchBase: string;
   searchFilter: string;
-  uniqueAttribute: string;
   bindDN: string;
   bindPass: string;
   ldapCaCertificate?: string;
@@ -34,7 +33,6 @@ export type TUpdateLdapAuthDTO = {
   url?: string;
   searchBase?: string;
   searchFilter?: string;
-  uniqueAttribute?: string;
   bindDN?: string;
   bindPass?: string;
   allowedFields?: TAllowedFields[];

frontend/src/hooks/api/identities/mutations.tsx

@@ -1064,7 +1064,6 @@ export const useAddIdentityLdapAuth = () => {
       bindPass,
       searchBase,
       searchFilter,
-      uniqueAttribute,
       ldapCaCertificate,
       allowedFields,
       accessTokenTTL,
@@ -1080,7 +1079,6 @@ export const useAddIdentityLdapAuth = () => {
           bindPass,
           searchBase,
           searchFilter,
-          uniqueAttribute,
           ldapCaCertificate,
           allowedFields,
           accessTokenTTL,
@@ -1113,7 +1111,6 @@ export const useUpdateIdentityLdapAuth = () => {
       bindPass,
       searchBase,
       searchFilter,
-      uniqueAttribute,
       ldapCaCertificate,
       allowedFields,
       accessTokenTTL,
@@ -1129,7 +1126,6 @@ export const useUpdateIdentityLdapAuth = () => {
           bindPass,
           searchBase,
           searchFilter,
-          uniqueAttribute,
           ldapCaCertificate,
           allowedFields,
           accessTokenTTL,

frontend/src/hooks/api/identities/types.ts

@@ -433,7 +433,6 @@ export type AddIdentityLdapAuthDTO = {
   bindPass: string;
   searchBase: string;
   searchFilter: string;
-  uniqueAttribute: string;
   ldapCaCertificate?: string;
   allowedFields?: {
     key: string;
@@ -455,7 +454,6 @@ export type UpdateIdentityLdapAuthDTO = {
   bindPass?: string;
   searchBase?: string;
   searchFilter?: string;
-  uniqueAttribute?: string;
   ldapCaCertificate?: string;
   allowedFields?: {
     key: string;
@@ -480,7 +478,6 @@ export type IdentityLdapAuth = {
   bindPass: string;
   searchBase: string;
   searchFilter: string;
-  uniqueAttribute: string;
   ldapCaCertificate?: string;
   allowedFields?: {
     key: string;

frontend/src/pages/organization/AccessManagementPage/components/OrgIdentityTab/components/IdentitySection/IdentityLdapAuthForm.tsx

@@ -35,7 +35,6 @@ const schema = z
     bindDN: z.string(),
     bindPass: z.string(),
     searchBase: z.string(),
-    uniqueAttribute: z.string(), // defaults to uidNumber
     searchFilter: z.string(), // defaults to (uid={{username}})
     ldapCaCertificate: z
       .string()
@@ -112,7 +111,6 @@ export const IdentityLdapAuthForm = ({
       bindDN: "",
       bindPass: "",
       searchBase: "",
-      uniqueAttribute: "uidNumber",
       searchFilter: "(uid={{username}})",
       accessTokenTTL: "2592000",
       accessTokenMaxTTL: "2592000",
@@ -140,7 +138,6 @@ export const IdentityLdapAuthForm = ({
         bindDN: data.bindDN,
         bindPass: data.bindPass,
         searchBase: data.searchBase,
-        uniqueAttribute: data.uniqueAttribute,
         searchFilter: data.searchFilter,
         ldapCaCertificate: data.ldapCaCertificate || undefined,
         allowedFields: data.allowedFields,
@@ -161,7 +158,6 @@ export const IdentityLdapAuthForm = ({
         bindDN: "",
         bindPass: "",
         searchBase: "",
-        uniqueAttribute: "uidNumber",
         searchFilter: "(uid={{username}})",
         ldapCaCertificate: undefined,
         allowedFields: [],
@@ -185,7 +181,6 @@ export const IdentityLdapAuthForm = ({
     bindDN,
     bindPass,
     searchBase,
-    uniqueAttribute,
     searchFilter,
     ldapCaCertificate,
     allowedFields,
@@ -206,7 +201,6 @@ export const IdentityLdapAuthForm = ({
           bindPass,
           searchBase,
           searchFilter,
-          uniqueAttribute,
           ldapCaCertificate,
           allowedFields,
           accessTokenTTL: Number(accessTokenTTL),
@@ -223,7 +217,6 @@ export const IdentityLdapAuthForm = ({
           bindPass,
           searchBase,
           searchFilter,
-          uniqueAttribute,
           ldapCaCertificate,
           allowedFields,
           accessTokenTTL: Number(accessTokenTTL),
@@ -259,8 +252,8 @@ export const IdentityLdapAuthForm = ({
             "bindPass",
             "searchBase",
             "searchFilter",
-            "uniqueAttribute",
             "accessTokenTTL",
+            "allowedFields",
             "accessTokenMaxTTL",
             "accessTokenNumUsesLimit"
           ].includes(Object.keys(fields)[0])
@@ -334,21 +327,6 @@ export const IdentityLdapAuthForm = ({
             )}
           />
 
-          <Controller
-            control={control}
-            name="uniqueAttribute"
-            render={({ field, fieldState: { error } }) => (
-              <FormControl
-                isRequired
-                label="Unique User Attribute"
-                isError={Boolean(error)}
-                errorText={error?.message}
-              >
-                <Input {...field} placeholder="uidNumber" />
-              </FormControl>
-            )}
-          />
-
           <Controller
             control={control}
             name="searchFilter"
@@ -364,69 +342,6 @@ export const IdentityLdapAuthForm = ({
             )}
           />
 
-          <Controller
-            control={control}
-            defaultValue="2592000"
-            name="accessTokenTTL"
-            render={({ field, fieldState: { error } }) => (
-              <FormControl
-                label="Access Token TTL (seconds)"
-                tooltipText="The lifetime for an acccess token in seconds. This value will be referenced at renewal time."
-                isError={Boolean(error)}
-                errorText={error?.message}
-              >
-                <Input {...field} placeholder="2592000" type="number" min="0" step="1" />
-              </FormControl>
-            )}
-          />
-          <Controller
-            control={control}
-            defaultValue="2592000"
-            name="accessTokenMaxTTL"
-            render={({ field, fieldState: { error } }) => (
-              <FormControl
-                label="Access Token Max TTL (seconds)"
-                isError={Boolean(error)}
-                errorText={error?.message}
-                tooltipText="The maximum lifetime for an access token in seconds. This value will be referenced at renewal time."
-              >
-                <Input {...field} placeholder="2592000" type="number" min="0" step="1" />
-              </FormControl>
-            )}
-          />
-          <Controller
-            control={control}
-            defaultValue="0"
-            name="accessTokenNumUsesLimit"
-            render={({ field, fieldState: { error } }) => (
-              <FormControl
-                label="Access Token Max Number of Uses"
-                isError={Boolean(error)}
-                errorText={error?.message}
-                tooltipText="The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses."
-              >
-                <Input {...field} placeholder="0" type="number" min="0" step="1" />
-              </FormControl>
-            )}
-          />
-        </TabPanel>
-        <TabPanel value={IdentityFormTab.Advanced}>
-          <Controller
-            control={control}
-            name="ldapCaCertificate"
-            render={({ field, fieldState: { error } }) => (
-              <FormControl
-                label="CA Certificate"
-                isOptional
-                errorText={error?.message}
-                isError={Boolean(error)}
-                tooltipText="An optional PEM-encoded CA cert for the LDAP server. This is used by the TLS client for secure communication with the LDAP server."
-              >
-                <TextArea {...field} placeholder="-----BEGIN CERTIFICATE----- ..." />
-              </FormControl>
-            )}
-          />
-
           {allowedFieldsFields.map(({ id }, index) => (
             <div className="mb-3 flex items-end space-x-2" key={id}>
               <Controller
@@ -535,6 +450,69 @@ export const IdentityLdapAuthForm = ({
             </Button>
           </div>
 
+          <Controller
+            control={control}
+            defaultValue="2592000"
+            name="accessTokenTTL"
+            render={({ field, fieldState: { error } }) => (
+              <FormControl
+                label="Access Token TTL (seconds)"
+                tooltipText="The lifetime for an acccess token in seconds. This value will be referenced at renewal time."
+                isError={Boolean(error)}
+                errorText={error?.message}
+              >
+                <Input {...field} placeholder="2592000" type="number" min="0" step="1" />
+              </FormControl>
+            )}
+          />
+          <Controller
+            control={control}
+            defaultValue="2592000"
+            name="accessTokenMaxTTL"
+            render={({ field, fieldState: { error } }) => (
+              <FormControl
+                label="Access Token Max TTL (seconds)"
+                isError={Boolean(error)}
+                errorText={error?.message}
+                tooltipText="The maximum lifetime for an access token in seconds. This value will be referenced at renewal time."
+              >
+                <Input {...field} placeholder="2592000" type="number" min="0" step="1" />
+              </FormControl>
+            )}
+          />
+          <Controller
+            control={control}
+            defaultValue="0"
+            name="accessTokenNumUsesLimit"
+            render={({ field, fieldState: { error } }) => (
+              <FormControl
+                label="Access Token Max Number of Uses"
+                isError={Boolean(error)}
+                errorText={error?.message}
+                tooltipText="The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses."
+              >
+                <Input {...field} placeholder="0" type="number" min="0" step="1" />
+              </FormControl>
+            )}
+          />
+        </TabPanel>
+        <TabPanel value={IdentityFormTab.Advanced}>
+          <Controller
+            control={control}
+            name="ldapCaCertificate"
+            render={({ field, fieldState: { error } }) => (
+              <FormControl
+                label="CA Certificate"
+                isOptional
+                errorText={error?.message}
+                isError={Boolean(error)}
+                tooltipText="An optional PEM-encoded CA cert for the LDAP server. This is used by the TLS client for secure communication with the LDAP server."
+              >
+                <TextArea {...field} placeholder="-----BEGIN CERTIFICATE----- ..." />
+              </FormControl>
+            )}
+          />
+
           {accessTokenTrustedIpsFields.map(({ id }, index) => (
             <div className="mb-3 flex items-end space-x-2" key={id}>
               <Controller

frontend/src/pages/organization/IdentityDetailsByIDPage/components/ViewIdentityAuthModal/ViewIdentityLdapAuthContent.tsx

@@ -79,9 +79,6 @@ export const ViewIdentityLdapAuthContent = ({
       <IdentityAuthFieldDisplay label="Search Base / DN">
         {data.searchBase}
       </IdentityAuthFieldDisplay>
-      <IdentityAuthFieldDisplay label="Unique Attribute">
-        {data.uniqueAttribute}
-      </IdentityAuthFieldDisplay>
       <IdentityAuthFieldDisplay label="Search Filter">{data.searchFilter}</IdentityAuthFieldDisplay>
       <IdentityAuthFieldDisplay label="CA Certificate">
         {data.ldapCaCertificate && (