Slow Login When Authenticating via LDAP (Active Directory)

Date: January 22, 2026
Audience: Everyone
Environmental Details: Self-hosted (all versions), LDAP Authentication, Active Directory

Summary 

This article explains how to resolve slow login times when authenticating with Active Directory (AD), where authentication can take up to a minute while local account logins work normally and AD functions correctly for other applications.

Resolution 

Ensure the JNDI Referrals option is disabled.

Steps:

1. Log in as a system administrator (root).
2. Navigate to System Properties > Application Authentication Properties > LDAP.
3. Locate the JNDI Referrals option.
4. Disable (uncheck) the JNDI Referrals option.
5. Save the configuration changes.
6. Test authentication using an Active Directory account.

After disabling JNDI Referrals, AD authentication completes normally and login times return to expected levels.

Cause 

When JNDI Referrals are enabled, the application may attempt to follow directory referrals during Active Directory authentication. This can introduce delays if the referral targets are slow to respond or unnecessary for the authentication flow, resulting in extended login times.

Prevention 

• Keep JNDI Referrals disabled unless they are explicitly required by the directory architecture.

• Review authentication settings after upgrades or configuration changes.

• If slow authentication is observed, compare AD login behavior with local account logins to help isolate directory-related delays.

Additional Resources

• Success Programs
• Success Catalog
• Datasheets
• Request a Solution Offering or Training from the Success Catalog 

Feedback:
We welcome your input! Please leave any comments, suggestions, or improvement ideas below.