LDAP single sign-on for Burp Suite DAST allows users to authenticate to Burp Suite using their existing LDAP credentials, streamlining the login process and reducing the need for separate user management within Burp Suite itself.

What is LDAP single sign-on for Burp Suite DAST?

LDAP single sign-on (SSO) for Burp Suite DAST integrates your organization’s LDAP directory with Burp Suite, enabling users to log in using their existing credentials. This integration simplifies the authentication process, enhances security, and ensures consistency with your organization’s identity management policies.

How do you set up LDAP in Burp Suite DAST?

Setting up LDAP in Burp Suite DAST involves configuring the LDAP server details, specifying the base distinguished name (DN), and mapping user attributes. Here’s a step-by-step guide:

Step 1: Access LDAP Configuration

  1. Open Burp Suite DAST.
  2. Navigate to Project Options.
  3. Select Users from the left-hand menu.
  4. Click on the LDAP tab.

Step 2: Configure LDAP Server Details

Enter the following details:

  • Server Address: The hostname or IP address of your LDAP server.
  • Port: The port number used by your LDAP server (default is 389 for LDAP and 636 for LDAPS).
  • Use SSL/TLS: Check this box if your LDAP server uses SSL/TLS encryption (recommended).

Example Configuration

Server Address: ldap.example.com
Port: 636
Use SSL/TLS: Checked

Step 3: Specify Base DN and Search Filter

  • Base DN: The distinguished name (DN) where user searches begin.
  • Search Filter: An LDAP filter to locate user entries.

Example Configuration

Base DN: dc=example,dc=com
Search Filter: (uid={0})

Step 4: Map User Attributes

Map the LDAP attributes to Burp Suite fields:

  • Username Attribute: Typically uid or cn.
  • Email Attribute: Typically mail.

Example Mapping

Username Attribute: uid
Email Attribute: mail

Step 5: Test LDAP Configuration

Click the Test Connection button to verify that Burp Suite can connect to your LDAP server and retrieve user information.

Step 6: Save Configuration

After testing, save the configuration and restart Burp Suite to apply changes.

What are common issues during LDAP configuration?

Common issues during LDAP configuration include incorrect server details, improper search filters, and mapping errors. Here are some troubleshooting steps:

Issue: Connection Refused

  • Cause: Incorrect server address or port.
  • Solution: Verify the server address and port. Ensure the LDAP server is running and accessible.

Issue: Invalid Search Filter

  • Cause: Incorrect or malformed search filter.
  • Solution: Double-check the search filter syntax. Ensure it correctly identifies user entries.

Issue: Attribute Mapping Errors

  • Cause: Mismatched attribute names.
  • Solution: Verify the attribute names in your LDAP directory match those configured in Burp Suite.

Security Considerations

Use Secure LDAP (LDAPS)

Always use LDAPS (LDAP over SSL/TLS) to encrypt communication between Burp Suite and the LDAP server. This prevents eavesdropping and man-in-the-middle attacks.

Protect LDAP Credentials

Never store LDAP credentials in plain text. Use secure methods to manage and protect these credentials.

Regularly Audit Access Logs

Regularly review LDAP access logs to detect and respond to unauthorized access attempts.

⚠️ Warning: Ensure secure LDAP communication (LDAPS) to protect credentials.

Comparison of LDAP vs. Local Authentication

ApproachProsConsUse When
LDAPCentralized user managementComplex setupOrganizations with existing LDAP infrastructure
Local AuthenticationSimpler setupDecentralized user managementSmall teams or isolated environments

Quick Reference

📋 Quick Reference

  • Server Address - LDAP server hostname or IP
  • Port - LDAP server port (389 or 636)
  • Use SSL/TLS - Enable for secure communication
  • Base DN - Starting point for user searches
  • Search Filter - LDAP filter for locating users
  • Username Attribute - LDAP attribute for usernames
  • Email Attribute - LDAP attribute for emails

Example LDAP Configuration

Here’s an example of a complete LDAP configuration in Burp Suite:

Server Address: ldap.example.com
Port: 636
Use SSL/TLS: Checked
Base DN: dc=example,dc=com
Search Filter: (uid={0})
Username Attribute: uid
Email Attribute: mail

🎯 Key Takeaways

  • LDAP SSO integrates Burp Suite with your organization's LDAP directory.
  • Configure server details, base DN, and user attributes carefully.
  • Use LDAPS for secure communication.
  • Regularly audit LDAP access logs for security.

Conclusion

Configuring LDAP single sign-on for Burp Suite DAST enhances security and streamlines user authentication. By following the steps outlined above, you can successfully integrate your LDAP directory with Burp Suite, ensuring a seamless and secure login experience for your team. This setup not only improves usability but also aligns with your organization’s identity management policies.

That’s it. Simple, secure, works.