NetNXT Logo

Why Does JumpCloud LDAP Show “Invalid Credentials” and How to Fix Bind DN?

January 29, 2026
2 min read
ByNetNXT

Overview

When connecting legacy appliances (Synology NAS, Fortinet VPN, PaperCut) to JumpCloud via LDAP, "Invalid Credentials" is the most common error. This usually stems from an incorrect Bind DN format.

The Golden Rules of JumpCloud LDAP

  1. Server: ldap.jumpcloud.com (Port 636 for SSL/LDAPS - Strongly Recommended).

  2. Bind DN User: You cannot just use an email address. You must use a specific Service Account.

How to Create a Proper Bind User

  1. Create a new user in JumpCloud (e.g., svc-ldap).

  2. Crucial Step: Open the user details > Permissions tab.

  3. Check the box: "Enable as LDAP Bind DN".

    • If you miss this, authentication will fail even with the correct password.

Constructing the Bind DN String

Most appliances ask for a "Bind DN" or "Username". Do not enter svc-ldap. Enter the full string:

uid=svc-ldap,ou=Users,o=YOUR_ORG_ID,dc=jumpcloud,dc=com

  • uid: The JumpCloud username of your service account.

  • o: Your unique Organization ID (Found in Settings > Organization Profile).

Common Errors & Fixes

  • Error 49 (Invalid Credentials): Check the Bind DN format. Ensure the password for svc-ldap is not expired.

  • Connection Timeout: Ensure your firewall allows outbound TCP traffic on Port 636 to ldap.jumpcloud.com.

  • Certificate Error: If the appliance requires a certificate, download the JumpCloud LDAP CA Certificate from the support portal and upload it to the appliance.

FAQ

1) What is the correct Bind DN format for JumpCloud LDAP?

Use: uid=username,ou=Users,o=ORG_ID,dc=jumpcloud,dc=com. Do not use the email address. Replace username and ORG_ID with your values.

2) Why do I get Error 49 “Invalid Credentials” with correct passwords?

This usually happens when the user is not enabled as an LDAP Bind DN in JumpCloud or the Bind DN string format is incorrect.

3) Which port should I use for JumpCloud LDAP?

Always use LDAPS on port 636 with ldap.jumpcloud.com for secure, encrypted directory authentication.

4) Do I need a special user for JumpCloud LDAP Bind?

Yes. Create a dedicated service account and enable the “LDAP Bind DN” permission under the user’s Permissions tab.

5) How do I fix certificate errors when connecting appliances to JumpCloud LDAP?

Download the JumpCloud LDAP CA certificate from the support portal and upload it into your appliance’s LDAP certificate trust store.

Was this article helpful?