The AEM instance can be setup to authenticate against ldap users by following [1]. However you might see that all the active directory users are not able to login. This could happen if any of the value specified in ldap_login.conf is not appropriate (Ex: User root or filter). The below article shows a sample ldap login-module (ldap_login.conf) & ldap client (JXplorer) mapping snapshot. I am using Opends (Ldap server acts as active directory) & JXplorer (Java LDAP Browser) to show the mappings. Connection-Settings Authentication-Settings userRoot: all users are searched from below dn. Auto-Creation To create the user within the repository and if needed to keep its data up-to date. [1] http://dev.day.com/docs/en/cq/current/core/administering/ldap_authentication.html