> For the complete documentation index, see [llms.txt](https://docs.portainer.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.portainer.io/faqs/troubleshooting/access-and-authentication/ldap-groups-are-not-auto-populating-portainer-teams.md).

# LDAP Groups are not auto-populating Portainer teams

**Issue:**

Users find that LDAP authentication succeeds and **Display User/Group matching** correctly shows group membership, but the user is not automatically added to the corresponding Portainer team on login.

**Cause:**

Portainer team synchronization requires distinguished name (DN)-based group membership.

* `posixGroup` + `memberUid` → Group detection works, but Team sync does not assign users
* `groupOfNames` + `member` → Fully supported for Team auto-assignment

**Resolution:**

To resolve this issue, update the LDAP group configuration to use DN-based membership.

```
objectClass: groupOfNames
member: <full user DN>
```