Installation

Requirements

The directory module is a server-side companion: it writes IAM users, memberships and grants directly
through the server’s Eloquent models (User, Membership, Grant). It must run in the same application as
the IAM server.

Install the package

composer require padosoft/laravel-iam-directory

The package auto-registers IamDirectoryServiceProvider via Laravel package discovery.

Add the LDAP transport (optional)

The real LDAP/Active Directory connector depends on PHP’s ext-ldap and LdapRecord. Both are kept in
suggest, not require, so the package installs and passes static analysis in environments without
ext-ldap (CI, Herd, containers):

composer require directorytree/ldaprecord-laravel   # enables Ldap\LdapConnector

Check the extension is present:

php -m | grep ldap

Publish the config

php artisan vendor:publish --tag=iam-directory-config

This writes config/iam-directory.php. Every key is documented in the Config reference.

What the service provider registers

IamDirectoryServiceProvider (a spatie/laravel-package-tools provider) wires three singletons:

$this->app->singleton(GroupMapper::class, fn ($app) =>
    new GroupMapper(config('iam-directory.group_map', [])));

$this->app->singleton(DirectoryProvisioner::class);

$this->app->singleton(DirectoryAuthenticator::class, fn ($app) =>
    new DirectoryAuthenticator(
        $app->make(DirectoryConnector::class),   // ← YOU must bind this
        $app->make(GroupMapper::class),
        $app->make(DirectoryProvisioner::class),
        config('iam-directory'),                 // the whole config section
    ));

$this->app->bind(
    \Padosoft\Iam\Directory\Contracts\DirectoryConnector::class,
    \App\Directory\MyConnector::class,
);

Verify the install

// tinker
app(\Padosoft\Iam\Directory\GroupMapper::class)->rolesFor(['developers']);
// → e.g. ['app:deployer', 'app:developer']  (sorted, from your group_map)

If that returns your mapped roles, the core is wired correctly. Resolving DirectoryAuthenticator next
verifies your connector binding.

Next steps

• Quickstart — the five-step happy path.
• LDAP / Active Directory setup — wire the real connector.
• Configuration — every policy and mapping knob.