# Dashboard Auth Ldap: Hermes Agent plugin

> LDAP / Active Directory password login for the web dashboard.

Canonical: https://hermeswatcher.com/plugins/dashboard-auth-ldap  
Tier: Community  
Official page (Nous Research): https://hermes-agent.nousresearch.com/docs/plugins/dashboard-auth-ldap  
Last updated in catalog: 2026-10-02

LDAP / Active Directory password login for the web dashboard. Verifies credentials with an LDAP bind (direct or search-then-bind), never stores passwords, requires ldaps:// or StartTLS, and supports group restriction. Registers the `ldap` dashboard auth provider once dashboard.ldap_auth is configured.

## Good to know before installing

Dashboard logins are verified by binding to your configured LDAP/AD server with the user's password (TLS with certificate validation required unless allow_insecure is set); sessions are stateless HMAC tokens (12h access / 30d refresh by default) signed with HERMES_DASHBOARD_LDAP_SECRET or a random per-process key, and logout cannot revoke them; group removal and disabled accounts are not re-checked until the refresh token expires; failed logins count toward the directory's account-lockout policy.

From the plugin's catalog listing.

## How to install

1. Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.

```bash
hermes plugins install dashboard-auth-ldap
```

2. Said no? Turn it on later:

```bash
hermes plugins enable dashboard-auth-ldap
```

3. Restart Hermes so it loads the plugin.

Some plugins also need a sign-in or settings: see the official page. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide: https://hermes-agent.nousresearch.com/docs/user-guide/features/plugins

## Facts

- Category: Security & privacy
- Maintained by: angel12 (Community)
- Needs: No API keys declared
- Requires Hermes: `>=0.21`
- Version: 1.0.0
- In the catalog since: 2026-10-02

## Links

- [Full setup and settings (official page)](https://hermes-agent.nousresearch.com/docs/plugins/dashboard-auth-ldap)
- [Source code](https://github.com/angel12/hermes-ldap-auth#readme)
- [All plugins](https://hermeswatcher.com/plugins.md)

---

HermesWatcher is an independent guide. It is not affiliated with or endorsed by Nous Research. The [official Hermes Agent documentation](https://hermes-agent.nousresearch.com/docs) and [repository](https://github.com/NousResearch/hermes-agent) from Nous Research are the authority; each page here lists the official sources it was written from. If this site and the official docs disagree, trust the official docs. Index for agents: https://hermeswatcher.com/llms.txt