# Advanced authentication for Data Grid in Red Hat OpenShift 4: LDAP and LDAPS

DevFeed: [Advanced authentication for Data Grid in Red Hat OpenShift 4: LDAP and LDAPS](<https://devfeed.tech/articles/advanced-authentication-for-data-grid-in-red-hat-openshift-4-ldap-and-ldaps-97549.md>)

Original publisher: [Read original article](<https://developers.redhat.com/articles/2026/10/23/advanced-authentication-data-grid-red-hat-openshift-4-ldap-and-ldaps>)

Author: Francisco De Melo Junior

Published: 2026-10-23T13:16:37Z

Content type: tutorial

Language: en

Sources: [Red Hat](<https://devfeed.tech/sources/red-hat.md>), [Red Hat Developer](<https://devfeed.tech/sources/red-hat-developer.md>)

Topics: [LDAP](<https://devfeed.tech/topics/ldap.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [active directory](<https://devfeed.tech/topics/active-directory.md>)

Tags: [active-directory](<https://devfeed.tech/tags/active-directory.md>), [advanced](<https://devfeed.tech/tags/advanced.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [certificate](<https://devfeed.tech/tags/certificate.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [corporate](<https://devfeed.tech/tags/corporate.md>), [custom](<https://devfeed.tech/tags/custom.md>), [data](<https://devfeed.tech/tags/data.md>), [data-grid](<https://devfeed.tech/tags/data-grid.md>), [directory](<https://devfeed.tech/tags/directory.md>), [field](<https://devfeed.tech/tags/field.md>), [first](<https://devfeed.tech/tags/first.md>), [grid](<https://devfeed.tech/tags/grid.md>), [guide](<https://devfeed.tech/tags/guide.md>), [hat](<https://devfeed.tech/tags/hat.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [openshift](<https://devfeed.tech/tags/openshift.md>), [operators](<https://devfeed.tech/tags/operators.md>), [red](<https://devfeed.tech/tags/red.md>), [red-hat](<https://devfeed.tech/tags/red-hat.md>), [red-hat-openshift](<https://devfeed.tech/tags/red-hat-openshift.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

The guide configures Red Hat Data Grid on OpenShift to authenticate directly against LDAP by referencing a ConfigMap in the Infinispan custom resource's `spec.configMapName`; the ConfigMap holds the LDAP URL, bind credentials, search DN, and user-to-role mapping. For LDAPS, it adds a certificate secret through `spec.security.endpointEncryption.clientCertSecretName` and switches the connection URL to `ldaps://`. With `clientCert: None`, the certificate is used to trust the LDAPS server without requiring client certificates; `Validate` or `Authenticate` enables client certificate enforcement. The excerpt recommends LDAP for isolated development or test traffic and LDAPS for production protection in transit. It cautions that plaintext bind credentials are for local tests and advises protected credentials for production.

## Source excerpt

This is the 2nd part of our series on securing Red Hat Data Grid. While part 1 explored centralized single sign-on (SSO) with Keycloak, this guide focuses on direct directory integration. Whether you are validating directory authentication against a local OpenLDAP test instance or connecting Data Grid directly to corporate Active Directory, this guide walks through the operator configuration and TLS certificate setup directly in the Infinispan custom resource using the spec.configMapName field. The post Advanced authentication for Data Grid in Red Hat OpenShift 4: LDAP and LDAPS appeared first on Red Hat Developer.