Prerequisites An LDAP server with at least one user. Testing Set up LDAP ("Site administration" > "Plugins" > "Authentication" > "Manage authentication") Ensure the setting "Synchronize local username" is set to "No" Run the LDAP synchronisation script: php admin/tool/task/cli/schedule_task.php --execute=\\auth_ldap\\task\\sync_task Browse to "Site administration" > "Users" > "Accounts" > "Browse a list of users" Find the user(s) that were created when you synced with the LDAP server (they may have blank usernames) Edit one Verify the username field is disabled Change the "Choose an authentication method" field and verify that the username field is enabled for: Email-based self-registration Manual accounts No login External database LTI No authentication Verify it is disabled for anything else Verify you can change the user's first name with one of the auth types that causes the username to be disabled Verify you can change the user's first name with one of the auth types that doesn't cause the username to be disabled Verify you can change the username of a user when the auth type doesn't disable it