diff --git a/apis/management.cattle.io/v3/zz_generated_deepcopy.go b/apis/management.cattle.io/v3/zz_generated_deepcopy.go
index 3185955d..31489b4f 100644
--- a/apis/management.cattle.io/v3/zz_generated_deepcopy.go
+++ b/apis/management.cattle.io/v3/zz_generated_deepcopy.go
@@ -328,6 +328,14 @@ func RegisterDeepCopies(scheme *runtime.Scheme) error {
 			in.(*FlannelNetworkProvider).DeepCopyInto(out.(*FlannelNetworkProvider))
 			return nil
 		}, InType: reflect.TypeOf(&FlannelNetworkProvider{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*FreeIpaConfig).DeepCopyInto(out.(*FreeIpaConfig))
+			return nil
+		}, InType: reflect.TypeOf(&FreeIpaConfig{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*FreeIpaTestAndApplyInput).DeepCopyInto(out.(*FreeIpaTestAndApplyInput))
+			return nil
+		}, InType: reflect.TypeOf(&FreeIpaTestAndApplyInput{})},
 		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
 			in.(*GenerateKubeConfigOutput).DeepCopyInto(out.(*GenerateKubeConfigOutput))
 			return nil
@@ -436,6 +444,18 @@ func RegisterDeepCopies(scheme *runtime.Scheme) error {
 			in.(*KubernetesServicesOptions).DeepCopyInto(out.(*KubernetesServicesOptions))
 			return nil
 		}, InType: reflect.TypeOf(&KubernetesServicesOptions{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*LdapConfig).DeepCopyInto(out.(*LdapConfig))
+			return nil
+		}, InType: reflect.TypeOf(&LdapConfig{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*LdapConfigList).DeepCopyInto(out.(*LdapConfigList))
+			return nil
+		}, InType: reflect.TypeOf(&LdapConfigList{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*LdapTestAndApplyInput).DeepCopyInto(out.(*LdapTestAndApplyInput))
+			return nil
+		}, InType: reflect.TypeOf(&LdapTestAndApplyInput{})},
 		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
 			in.(*ListOpts).DeepCopyInto(out.(*ListOpts))
 			return nil
@@ -576,6 +596,14 @@ func RegisterDeepCopies(scheme *runtime.Scheme) error {
 			in.(*NotifierStatus).DeepCopyInto(out.(*NotifierStatus))
 			return nil
 		}, InType: reflect.TypeOf(&NotifierStatus{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*OpenLdapConfig).DeepCopyInto(out.(*OpenLdapConfig))
+			return nil
+		}, InType: reflect.TypeOf(&OpenLdapConfig{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*OpenLdapTestAndApplyInput).DeepCopyInto(out.(*OpenLdapTestAndApplyInput))
+			return nil
+		}, InType: reflect.TypeOf(&OpenLdapTestAndApplyInput{})},
 		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
 			in.(*OpenstackCloudProvider).DeepCopyInto(out.(*OpenstackCloudProvider))
 			return nil
@@ -2975,6 +3003,58 @@ func (in *FlannelNetworkProvider) DeepCopy() *FlannelNetworkProvider {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *FreeIpaConfig) DeepCopyInto(out *FreeIpaConfig) {
+	*out = *in
+	in.LdapConfig.DeepCopyInto(&out.LdapConfig)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FreeIpaConfig.
+func (in *FreeIpaConfig) DeepCopy() *FreeIpaConfig {
+	if in == nil {
+		return nil
+	}
+	out := new(FreeIpaConfig)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *FreeIpaConfig) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *FreeIpaTestAndApplyInput) DeepCopyInto(out *FreeIpaTestAndApplyInput) {
+	*out = *in
+	in.LdapTestAndApplyInput.DeepCopyInto(&out.LdapTestAndApplyInput)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FreeIpaTestAndApplyInput.
+func (in *FreeIpaTestAndApplyInput) DeepCopy() *FreeIpaTestAndApplyInput {
+	if in == nil {
+		return nil
+	}
+	out := new(FreeIpaTestAndApplyInput)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *FreeIpaTestAndApplyInput) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *GenerateKubeConfigOutput) DeepCopyInto(out *GenerateKubeConfigOutput) {
 	*out = *in
@@ -3620,6 +3700,99 @@ func (in *KubernetesServicesOptions) DeepCopy() *KubernetesServicesOptions {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *LdapConfig) DeepCopyInto(out *LdapConfig) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
+	in.AuthConfig.DeepCopyInto(&out.AuthConfig)
+	if in.Servers != nil {
+		in, out := &in.Servers, &out.Servers
+		*out = make([]string, len(*in))
+		copy(*out, *in)
+	}
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LdapConfig.
+func (in *LdapConfig) DeepCopy() *LdapConfig {
+	if in == nil {
+		return nil
+	}
+	out := new(LdapConfig)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *LdapConfig) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *LdapConfigList) DeepCopyInto(out *LdapConfigList) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	out.ListMeta = in.ListMeta
+	if in.Items != nil {
+		in, out := &in.Items, &out.Items
+		*out = make([]LdapConfig, len(*in))
+		for i := range *in {
+			(*in)[i].DeepCopyInto(&(*out)[i])
+		}
+	}
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LdapConfigList.
+func (in *LdapConfigList) DeepCopy() *LdapConfigList {
+	if in == nil {
+		return nil
+	}
+	out := new(LdapConfigList)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *LdapConfigList) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *LdapTestAndApplyInput) DeepCopyInto(out *LdapTestAndApplyInput) {
+	*out = *in
+	in.LdapConfig.DeepCopyInto(&out.LdapConfig)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LdapTestAndApplyInput.
+func (in *LdapTestAndApplyInput) DeepCopy() *LdapTestAndApplyInput {
+	if in == nil {
+		return nil
+	}
+	out := new(LdapTestAndApplyInput)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *LdapTestAndApplyInput) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *ListOpts) DeepCopyInto(out *ListOpts) {
 	*out = *in
@@ -4721,6 +4894,58 @@ func (in *NotifierStatus) DeepCopy() *NotifierStatus {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OpenLdapConfig) DeepCopyInto(out *OpenLdapConfig) {
+	*out = *in
+	in.LdapConfig.DeepCopyInto(&out.LdapConfig)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenLdapConfig.
+func (in *OpenLdapConfig) DeepCopy() *OpenLdapConfig {
+	if in == nil {
+		return nil
+	}
+	out := new(OpenLdapConfig)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *OpenLdapConfig) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OpenLdapTestAndApplyInput) DeepCopyInto(out *OpenLdapTestAndApplyInput) {
+	*out = *in
+	in.LdapTestAndApplyInput.DeepCopyInto(&out.LdapTestAndApplyInput)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenLdapTestAndApplyInput.
+func (in *OpenLdapTestAndApplyInput) DeepCopy() *OpenLdapTestAndApplyInput {
+	if in == nil {
+		return nil
+	}
+	out := new(OpenLdapTestAndApplyInput)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *OpenLdapTestAndApplyInput) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *OpenstackCloudProvider) DeepCopyInto(out *OpenstackCloudProvider) {
 	*out = *in
diff --git a/apis/management.cattle.io/v3/zz_generated_k8s_client.go b/apis/management.cattle.io/v3/zz_generated_k8s_client.go
index da2e5f23..9b8763b4 100644
--- a/apis/management.cattle.io/v3/zz_generated_k8s_client.go
+++ b/apis/management.cattle.io/v3/zz_generated_k8s_client.go
@@ -39,6 +39,7 @@ type Interface interface {
 	PrincipalsGetter
 	UsersGetter
 	AuthConfigsGetter
+	LdapConfigsGetter
 	TokensGetter
 	DynamicSchemasGetter
 	PreferencesGetter
@@ -88,6 +89,7 @@ type Client struct {
 	principalControllers                               map[string]PrincipalController
 	userControllers                                    map[string]UserController
 	authConfigControllers                              map[string]AuthConfigController
+	ldapConfigControllers                              map[string]LdapConfigController
 	tokenControllers                                   map[string]TokenController
 	dynamicSchemaControllers                           map[string]DynamicSchemaController
 	preferenceControllers                              map[string]PreferenceController
@@ -146,6 +148,7 @@ func NewForConfig(config rest.Config) (Interface, error) {
 		principalControllers:                               map[string]PrincipalController{},
 		userControllers:                                    map[string]UserController{},
 		authConfigControllers:                              map[string]AuthConfigController{},
+		ldapConfigControllers:                              map[string]LdapConfigController{},
 		tokenControllers:                                   map[string]TokenController{},
 		dynamicSchemaControllers:                           map[string]DynamicSchemaController{},
 		preferenceControllers:                              map[string]PreferenceController{},
@@ -491,6 +494,19 @@ func (c *Client) AuthConfigs(namespace string) AuthConfigInterface {
 	}
 }
 
+type LdapConfigsGetter interface {
+	LdapConfigs(namespace string) LdapConfigInterface
+}
+
+func (c *Client) LdapConfigs(namespace string) LdapConfigInterface {
+	objectClient := objectclient.NewObjectClient(namespace, c.restClient, &LdapConfigResource, LdapConfigGroupVersionKind, ldapConfigFactory{})
+	return &ldapConfigClient{
+		ns:           namespace,
+		client:       c,
+		objectClient: objectClient,
+	}
+}
+
 type TokensGetter interface {
 	Tokens(namespace string) TokenInterface
 }
diff --git a/apis/management.cattle.io/v3/zz_generated_ldap_config_controller.go b/apis/management.cattle.io/v3/zz_generated_ldap_config_controller.go
new file mode 100644
index 00000000..91a436c7
--- /dev/null
+++ b/apis/management.cattle.io/v3/zz_generated_ldap_config_controller.go
@@ -0,0 +1,251 @@
+package v3
+
+import (
+	"context"
+
+	"github.com/rancher/norman/controller"
+	"github.com/rancher/norman/objectclient"
+	"k8s.io/apimachinery/pkg/api/errors"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/labels"
+	"k8s.io/apimachinery/pkg/runtime"
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"k8s.io/apimachinery/pkg/watch"
+	"k8s.io/client-go/tools/cache"
+)
+
+var (
+	LdapConfigGroupVersionKind = schema.GroupVersionKind{
+		Version: Version,
+		Group:   GroupName,
+		Kind:    "LdapConfig",
+	}
+	LdapConfigResource = metav1.APIResource{
+		Name:         "ldapconfigs",
+		SingularName: "ldapconfig",
+		Namespaced:   false,
+		Kind:         LdapConfigGroupVersionKind.Kind,
+	}
+)
+
+type LdapConfigList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+	Items           []LdapConfig
+}
+
+type LdapConfigHandlerFunc func(key string, obj *LdapConfig) error
+
+type LdapConfigLister interface {
+	List(namespace string, selector labels.Selector) (ret []*LdapConfig, err error)
+	Get(namespace, name string) (*LdapConfig, error)
+}
+
+type LdapConfigController interface {
+	Informer() cache.SharedIndexInformer
+	Lister() LdapConfigLister
+	AddHandler(name string, handler LdapConfigHandlerFunc)
+	AddClusterScopedHandler(name, clusterName string, handler LdapConfigHandlerFunc)
+	Enqueue(namespace, name string)
+	Sync(ctx context.Context) error
+	Start(ctx context.Context, threadiness int) error
+}
+
+type LdapConfigInterface interface {
+	ObjectClient() *objectclient.ObjectClient
+	Create(*LdapConfig) (*LdapConfig, error)
+	GetNamespaced(namespace, name string, opts metav1.GetOptions) (*LdapConfig, error)
+	Get(name string, opts metav1.GetOptions) (*LdapConfig, error)
+	Update(*LdapConfig) (*LdapConfig, error)
+	Delete(name string, options *metav1.DeleteOptions) error
+	DeleteNamespaced(namespace, name string, options *metav1.DeleteOptions) error
+	List(opts metav1.ListOptions) (*LdapConfigList, error)
+	Watch(opts metav1.ListOptions) (watch.Interface, error)
+	DeleteCollection(deleteOpts *metav1.DeleteOptions, listOpts metav1.ListOptions) error
+	Controller() LdapConfigController
+	AddHandler(name string, sync LdapConfigHandlerFunc)
+	AddLifecycle(name string, lifecycle LdapConfigLifecycle)
+	AddClusterScopedHandler(name, clusterName string, sync LdapConfigHandlerFunc)
+	AddClusterScopedLifecycle(name, clusterName string, lifecycle LdapConfigLifecycle)
+}
+
+type ldapConfigLister struct {
+	controller *ldapConfigController
+}
+
+func (l *ldapConfigLister) List(namespace string, selector labels.Selector) (ret []*LdapConfig, err error) {
+	err = cache.ListAllByNamespace(l.controller.Informer().GetIndexer(), namespace, selector, func(obj interface{}) {
+		ret = append(ret, obj.(*LdapConfig))
+	})
+	return
+}
+
+func (l *ldapConfigLister) Get(namespace, name string) (*LdapConfig, error) {
+	var key string
+	if namespace != "" {
+		key = namespace + "/" + name
+	} else {
+		key = name
+	}
+	obj, exists, err := l.controller.Informer().GetIndexer().GetByKey(key)
+	if err != nil {
+		return nil, err
+	}
+	if !exists {
+		return nil, errors.NewNotFound(schema.GroupResource{
+			Group:    LdapConfigGroupVersionKind.Group,
+			Resource: "ldapConfig",
+		}, name)
+	}
+	return obj.(*LdapConfig), nil
+}
+
+type ldapConfigController struct {
+	controller.GenericController
+}
+
+func (c *ldapConfigController) Lister() LdapConfigLister {
+	return &ldapConfigLister{
+		controller: c,
+	}
+}
+
+func (c *ldapConfigController) AddHandler(name string, handler LdapConfigHandlerFunc) {
+	c.GenericController.AddHandler(name, func(key string) error {
+		obj, exists, err := c.Informer().GetStore().GetByKey(key)
+		if err != nil {
+			return err
+		}
+		if !exists {
+			return handler(key, nil)
+		}
+		return handler(key, obj.(*LdapConfig))
+	})
+}
+
+func (c *ldapConfigController) AddClusterScopedHandler(name, cluster string, handler LdapConfigHandlerFunc) {
+	c.GenericController.AddHandler(name, func(key string) error {
+		obj, exists, err := c.Informer().GetStore().GetByKey(key)
+		if err != nil {
+			return err
+		}
+		if !exists {
+			return handler(key, nil)
+		}
+
+		if !controller.ObjectInCluster(cluster, obj) {
+			return nil
+		}
+
+		return handler(key, obj.(*LdapConfig))
+	})
+}
+
+type ldapConfigFactory struct {
+}
+
+func (c ldapConfigFactory) Object() runtime.Object {
+	return &LdapConfig{}
+}
+
+func (c ldapConfigFactory) List() runtime.Object {
+	return &LdapConfigList{}
+}
+
+func (s *ldapConfigClient) Controller() LdapConfigController {
+	s.client.Lock()
+	defer s.client.Unlock()
+
+	c, ok := s.client.ldapConfigControllers[s.ns]
+	if ok {
+		return c
+	}
+
+	genericController := controller.NewGenericController(LdapConfigGroupVersionKind.Kind+"Controller",
+		s.objectClient)
+
+	c = &ldapConfigController{
+		GenericController: genericController,
+	}
+
+	s.client.ldapConfigControllers[s.ns] = c
+	s.client.starters = append(s.client.starters, c)
+
+	return c
+}
+
+type ldapConfigClient struct {
+	client       *Client
+	ns           string
+	objectClient *objectclient.ObjectClient
+	controller   LdapConfigController
+}
+
+func (s *ldapConfigClient) ObjectClient() *objectclient.ObjectClient {
+	return s.objectClient
+}
+
+func (s *ldapConfigClient) Create(o *LdapConfig) (*LdapConfig, error) {
+	obj, err := s.objectClient.Create(o)
+	return obj.(*LdapConfig), err
+}
+
+func (s *ldapConfigClient) Get(name string, opts metav1.GetOptions) (*LdapConfig, error) {
+	obj, err := s.objectClient.Get(name, opts)
+	return obj.(*LdapConfig), err
+}
+
+func (s *ldapConfigClient) GetNamespaced(namespace, name string, opts metav1.GetOptions) (*LdapConfig, error) {
+	obj, err := s.objectClient.GetNamespaced(namespace, name, opts)
+	return obj.(*LdapConfig), err
+}
+
+func (s *ldapConfigClient) Update(o *LdapConfig) (*LdapConfig, error) {
+	obj, err := s.objectClient.Update(o.Name, o)
+	return obj.(*LdapConfig), err
+}
+
+func (s *ldapConfigClient) Delete(name string, options *metav1.DeleteOptions) error {
+	return s.objectClient.Delete(name, options)
+}
+
+func (s *ldapConfigClient) DeleteNamespaced(namespace, name string, options *metav1.DeleteOptions) error {
+	return s.objectClient.DeleteNamespaced(namespace, name, options)
+}
+
+func (s *ldapConfigClient) List(opts metav1.ListOptions) (*LdapConfigList, error) {
+	obj, err := s.objectClient.List(opts)
+	return obj.(*LdapConfigList), err
+}
+
+func (s *ldapConfigClient) Watch(opts metav1.ListOptions) (watch.Interface, error) {
+	return s.objectClient.Watch(opts)
+}
+
+// Patch applies the patch and returns the patched deployment.
+func (s *ldapConfigClient) Patch(o *LdapConfig, data []byte, subresources ...string) (*LdapConfig, error) {
+	obj, err := s.objectClient.Patch(o.Name, o, data, subresources...)
+	return obj.(*LdapConfig), err
+}
+
+func (s *ldapConfigClient) DeleteCollection(deleteOpts *metav1.DeleteOptions, listOpts metav1.ListOptions) error {
+	return s.objectClient.DeleteCollection(deleteOpts, listOpts)
+}
+
+func (s *ldapConfigClient) AddHandler(name string, sync LdapConfigHandlerFunc) {
+	s.Controller().AddHandler(name, sync)
+}
+
+func (s *ldapConfigClient) AddLifecycle(name string, lifecycle LdapConfigLifecycle) {
+	sync := NewLdapConfigLifecycleAdapter(name, false, s, lifecycle)
+	s.AddHandler(name, sync)
+}
+
+func (s *ldapConfigClient) AddClusterScopedHandler(name, clusterName string, sync LdapConfigHandlerFunc) {
+	s.Controller().AddClusterScopedHandler(name, clusterName, sync)
+}
+
+func (s *ldapConfigClient) AddClusterScopedLifecycle(name, clusterName string, lifecycle LdapConfigLifecycle) {
+	sync := NewLdapConfigLifecycleAdapter(name+"_"+clusterName, true, s, lifecycle)
+	s.AddClusterScopedHandler(name, clusterName, sync)
+}
diff --git a/apis/management.cattle.io/v3/zz_generated_ldap_config_lifecycle_adapter.go b/apis/management.cattle.io/v3/zz_generated_ldap_config_lifecycle_adapter.go
new file mode 100644
index 00000000..beb2c4a5
--- /dev/null
+++ b/apis/management.cattle.io/v3/zz_generated_ldap_config_lifecycle_adapter.go
@@ -0,0 +1,51 @@
+package v3
+
+import (
+	"github.com/rancher/norman/lifecycle"
+	"k8s.io/apimachinery/pkg/runtime"
+)
+
+type LdapConfigLifecycle interface {
+	Create(obj *LdapConfig) (*LdapConfig, error)
+	Remove(obj *LdapConfig) (*LdapConfig, error)
+	Updated(obj *LdapConfig) (*LdapConfig, error)
+}
+
+type ldapConfigLifecycleAdapter struct {
+	lifecycle LdapConfigLifecycle
+}
+
+func (w *ldapConfigLifecycleAdapter) Create(obj runtime.Object) (runtime.Object, error) {
+	o, err := w.lifecycle.Create(obj.(*LdapConfig))
+	if o == nil {
+		return nil, err
+	}
+	return o, err
+}
+
+func (w *ldapConfigLifecycleAdapter) Finalize(obj runtime.Object) (runtime.Object, error) {
+	o, err := w.lifecycle.Remove(obj.(*LdapConfig))
+	if o == nil {
+		return nil, err
+	}
+	return o, err
+}
+
+func (w *ldapConfigLifecycleAdapter) Updated(obj runtime.Object) (runtime.Object, error) {
+	o, err := w.lifecycle.Updated(obj.(*LdapConfig))
+	if o == nil {
+		return nil, err
+	}
+	return o, err
+}
+
+func NewLdapConfigLifecycleAdapter(name string, clusterScoped bool, client LdapConfigInterface, l LdapConfigLifecycle) LdapConfigHandlerFunc {
+	adapter := &ldapConfigLifecycleAdapter{lifecycle: l}
+	syncFn := lifecycle.NewObjectLifecycleAdapter(name, clusterScoped, adapter, client.ObjectClient())
+	return func(key string, obj *LdapConfig) error {
+		if obj == nil {
+			return syncFn(key, nil)
+		}
+		return syncFn(key, obj)
+	}
+}
diff --git a/apis/management.cattle.io/v3/zz_generated_scheme.go b/apis/management.cattle.io/v3/zz_generated_scheme.go
index 26ccca06..bb4f4ecd 100644
--- a/apis/management.cattle.io/v3/zz_generated_scheme.go
+++ b/apis/management.cattle.io/v3/zz_generated_scheme.go
@@ -81,6 +81,8 @@ func addKnownTypes(scheme *runtime.Scheme) error {
 		&UserList{},
 		&AuthConfig{},
 		&AuthConfigList{},
+		&LdapConfig{},
+		&LdapConfigList{},
 		&Token{},
 		&TokenList{},
 		&DynamicSchema{},
diff --git a/apis/management.cattle.io/v3public/zz_generated_deepcopy.go b/apis/management.cattle.io/v3public/zz_generated_deepcopy.go
index 6dfa1344..311fe06d 100644
--- a/apis/management.cattle.io/v3public/zz_generated_deepcopy.go
+++ b/apis/management.cattle.io/v3public/zz_generated_deepcopy.go
@@ -41,6 +41,10 @@ func RegisterDeepCopies(scheme *runtime.Scheme) error {
 			in.(*BasicLogin).DeepCopyInto(out.(*BasicLogin))
 			return nil
 		}, InType: reflect.TypeOf(&BasicLogin{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*FreeIpaProvider).DeepCopyInto(out.(*FreeIpaProvider))
+			return nil
+		}, InType: reflect.TypeOf(&FreeIpaProvider{})},
 		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
 			in.(*GenericLogin).DeepCopyInto(out.(*GenericLogin))
 			return nil
@@ -57,6 +61,10 @@ func RegisterDeepCopies(scheme *runtime.Scheme) error {
 			in.(*LocalProvider).DeepCopyInto(out.(*LocalProvider))
 			return nil
 		}, InType: reflect.TypeOf(&LocalProvider{})},
+		conversion.GeneratedDeepCopyFunc{Fn: func(in interface{}, out interface{}, c *conversion.Cloner) error {
+			in.(*OpenLdapProvider).DeepCopyInto(out.(*OpenLdapProvider))
+			return nil
+		}, InType: reflect.TypeOf(&OpenLdapProvider{})},
 	)
 }
 
@@ -211,6 +219,34 @@ func (in *BasicLogin) DeepCopy() *BasicLogin {
 	return out
 }
 
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *FreeIpaProvider) DeepCopyInto(out *FreeIpaProvider) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
+	in.AuthProvider.DeepCopyInto(&out.AuthProvider)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FreeIpaProvider.
+func (in *FreeIpaProvider) DeepCopy() *FreeIpaProvider {
+	if in == nil {
+		return nil
+	}
+	out := new(FreeIpaProvider)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *FreeIpaProvider) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
+
 // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
 func (in *GenericLogin) DeepCopyInto(out *GenericLogin) {
 	*out = *in
@@ -299,3 +335,31 @@ func (in *LocalProvider) DeepCopyObject() runtime.Object {
 		return nil
 	}
 }
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OpenLdapProvider) DeepCopyInto(out *OpenLdapProvider) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
+	in.AuthProvider.DeepCopyInto(&out.AuthProvider)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenLdapProvider.
+func (in *OpenLdapProvider) DeepCopy() *OpenLdapProvider {
+	if in == nil {
+		return nil
+	}
+	out := new(OpenLdapProvider)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *OpenLdapProvider) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	} else {
+		return nil
+	}
+}
diff --git a/client/management/v3/zz_generated_client.go b/client/management/v3/zz_generated_client.go
index 500f37a2..44c4c87e 100644
--- a/client/management/v3/zz_generated_client.go
+++ b/client/management/v3/zz_generated_client.go
@@ -31,6 +31,7 @@ type Client struct {
 	Principal                               PrincipalOperations
 	User                                    UserOperations
 	AuthConfig                              AuthConfigOperations
+	LdapConfig                              LdapConfigOperations
 	Token                                   TokenOperations
 	DynamicSchema                           DynamicSchemaOperations
 	Preference                              PreferenceOperations
@@ -85,6 +86,7 @@ func NewClient(opts *clientbase.ClientOpts) (*Client, error) {
 	client.Principal = newPrincipalClient(client)
 	client.User = newUserClient(client)
 	client.AuthConfig = newAuthConfigClient(client)
+	client.LdapConfig = newLdapConfigClient(client)
 	client.Token = newTokenClient(client)
 	client.DynamicSchema = newDynamicSchemaClient(client)
 	client.Preference = newPreferenceClient(client)
diff --git a/client/management/v3/zz_generated_free_ipa_config.go b/client/management/v3/zz_generated_free_ipa_config.go
new file mode 100644
index 00000000..50a7ad12
--- /dev/null
+++ b/client/management/v3/zz_generated_free_ipa_config.go
@@ -0,0 +1,76 @@
+package client
+
+const (
+	FreeIpaConfigType                                 = "freeIpaConfig"
+	FreeIpaConfigFieldAccessMode                      = "accessMode"
+	FreeIpaConfigFieldAllowedPrincipalIDs             = "allowedPrincipalIds"
+	FreeIpaConfigFieldAnnotations                     = "annotations"
+	FreeIpaConfigFieldCertificate                     = "certificate"
+	FreeIpaConfigFieldConnectionTimeout               = "connectionTimeout"
+	FreeIpaConfigFieldCreated                         = "created"
+	FreeIpaConfigFieldCreatorID                       = "creatorId"
+	FreeIpaConfigFieldEnabled                         = "enabled"
+	FreeIpaConfigFieldGroupDNAttribute                = "groupDNAttribute"
+	FreeIpaConfigFieldGroupMemberMappingAttribute     = "groupMemberMappingAttribute"
+	FreeIpaConfigFieldGroupMemberUserAttribute        = "groupMemberUserAttribute"
+	FreeIpaConfigFieldGroupNameAttribute              = "groupNameAttribute"
+	FreeIpaConfigFieldGroupObjectClass                = "groupObjectClass"
+	FreeIpaConfigFieldGroupSearchAttribute            = "groupSearchAttribute"
+	FreeIpaConfigFieldGroupSearchBase                 = "groupSearchBase"
+	FreeIpaConfigFieldLabels                          = "labels"
+	FreeIpaConfigFieldName                            = "name"
+	FreeIpaConfigFieldOwnerReferences                 = "ownerReferences"
+	FreeIpaConfigFieldPort                            = "port"
+	FreeIpaConfigFieldRemoved                         = "removed"
+	FreeIpaConfigFieldServers                         = "servers"
+	FreeIpaConfigFieldServiceAccountDistinguishedName = "serviceAccountDistinguishedName"
+	FreeIpaConfigFieldServiceAccountPassword          = "serviceAccountPassword"
+	FreeIpaConfigFieldTLS                             = "tls"
+	FreeIpaConfigFieldType                            = "type"
+	FreeIpaConfigFieldUserDisabledBitMask             = "userDisabledBitMask"
+	FreeIpaConfigFieldUserEnabledAttribute            = "userEnabledAttribute"
+	FreeIpaConfigFieldUserLoginAttribute              = "userLoginAttribute"
+	FreeIpaConfigFieldUserMemberAttribute             = "userMemberAttribute"
+	FreeIpaConfigFieldUserNameAttribute               = "userNameAttribute"
+	FreeIpaConfigFieldUserObjectClass                 = "userObjectClass"
+	FreeIpaConfigFieldUserSearchAttribute             = "userSearchAttribute"
+	FreeIpaConfigFieldUserSearchBase                  = "userSearchBase"
+	FreeIpaConfigFieldUuid                            = "uuid"
+)
+
+type FreeIpaConfig struct {
+	AccessMode                      string            `json:"accessMode,omitempty" yaml:"accessMode,omitempty"`
+	AllowedPrincipalIDs             []string          `json:"allowedPrincipalIds,omitempty" yaml:"allowedPrincipalIds,omitempty"`
+	Annotations                     map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
+	Certificate                     string            `json:"certificate,omitempty" yaml:"certificate,omitempty"`
+	ConnectionTimeout               int64             `json:"connectionTimeout,omitempty" yaml:"connectionTimeout,omitempty"`
+	Created                         string            `json:"created,omitempty" yaml:"created,omitempty"`
+	CreatorID                       string            `json:"creatorId,omitempty" yaml:"creatorId,omitempty"`
+	Enabled                         bool              `json:"enabled,omitempty" yaml:"enabled,omitempty"`
+	GroupDNAttribute                string            `json:"groupDNAttribute,omitempty" yaml:"groupDNAttribute,omitempty"`
+	GroupMemberMappingAttribute     string            `json:"groupMemberMappingAttribute,omitempty" yaml:"groupMemberMappingAttribute,omitempty"`
+	GroupMemberUserAttribute        string            `json:"groupMemberUserAttribute,omitempty" yaml:"groupMemberUserAttribute,omitempty"`
+	GroupNameAttribute              string            `json:"groupNameAttribute,omitempty" yaml:"groupNameAttribute,omitempty"`
+	GroupObjectClass                string            `json:"groupObjectClass,omitempty" yaml:"groupObjectClass,omitempty"`
+	GroupSearchAttribute            string            `json:"groupSearchAttribute,omitempty" yaml:"groupSearchAttribute,omitempty"`
+	GroupSearchBase                 string            `json:"groupSearchBase,omitempty" yaml:"groupSearchBase,omitempty"`
+	Labels                          map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
+	Name                            string            `json:"name,omitempty" yaml:"name,omitempty"`
+	OwnerReferences                 []OwnerReference  `json:"ownerReferences,omitempty" yaml:"ownerReferences,omitempty"`
+	Port                            int64             `json:"port,omitempty" yaml:"port,omitempty"`
+	Removed                         string            `json:"removed,omitempty" yaml:"removed,omitempty"`
+	Servers                         []string          `json:"servers,omitempty" yaml:"servers,omitempty"`
+	ServiceAccountDistinguishedName string            `json:"serviceAccountDistinguishedName,omitempty" yaml:"serviceAccountDistinguishedName,omitempty"`
+	ServiceAccountPassword          string            `json:"serviceAccountPassword,omitempty" yaml:"serviceAccountPassword,omitempty"`
+	TLS                             bool              `json:"tls,omitempty" yaml:"tls,omitempty"`
+	Type                            string            `json:"type,omitempty" yaml:"type,omitempty"`
+	UserDisabledBitMask             int64             `json:"userDisabledBitMask,omitempty" yaml:"userDisabledBitMask,omitempty"`
+	UserEnabledAttribute            string            `json:"userEnabledAttribute,omitempty" yaml:"userEnabledAttribute,omitempty"`
+	UserLoginAttribute              string            `json:"userLoginAttribute,omitempty" yaml:"userLoginAttribute,omitempty"`
+	UserMemberAttribute             string            `json:"userMemberAttribute,omitempty" yaml:"userMemberAttribute,omitempty"`
+	UserNameAttribute               string            `json:"userNameAttribute,omitempty" yaml:"userNameAttribute,omitempty"`
+	UserObjectClass                 string            `json:"userObjectClass,omitempty" yaml:"userObjectClass,omitempty"`
+	UserSearchAttribute             string            `json:"userSearchAttribute,omitempty" yaml:"userSearchAttribute,omitempty"`
+	UserSearchBase                  string            `json:"userSearchBase,omitempty" yaml:"userSearchBase,omitempty"`
+	Uuid                            string            `json:"uuid,omitempty" yaml:"uuid,omitempty"`
+}
diff --git a/client/management/v3/zz_generated_free_ipa_test_and_apply_input.go b/client/management/v3/zz_generated_free_ipa_test_and_apply_input.go
new file mode 100644
index 00000000..ad27c591
--- /dev/null
+++ b/client/management/v3/zz_generated_free_ipa_test_and_apply_input.go
@@ -0,0 +1,14 @@
+package client
+
+const (
+	FreeIpaTestAndApplyInputType            = "freeIpaTestAndApplyInput"
+	FreeIpaTestAndApplyInputFieldLdapConfig = "ldapConfig"
+	FreeIpaTestAndApplyInputFieldPassword   = "password"
+	FreeIpaTestAndApplyInputFieldUsername   = "username"
+)
+
+type FreeIpaTestAndApplyInput struct {
+	LdapConfig *LdapConfig `json:"ldapConfig,omitempty" yaml:"ldapConfig,omitempty"`
+	Password   string      `json:"password,omitempty" yaml:"password,omitempty"`
+	Username   string      `json:"username,omitempty" yaml:"username,omitempty"`
+}
diff --git a/client/management/v3/zz_generated_ldap_config.go b/client/management/v3/zz_generated_ldap_config.go
new file mode 100644
index 00000000..25e73e9e
--- /dev/null
+++ b/client/management/v3/zz_generated_ldap_config.go
@@ -0,0 +1,143 @@
+package client
+
+import (
+	"github.com/rancher/norman/types"
+)
+
+const (
+	LdapConfigType                                 = "ldapConfig"
+	LdapConfigFieldAccessMode                      = "accessMode"
+	LdapConfigFieldAllowedPrincipalIDs             = "allowedPrincipalIds"
+	LdapConfigFieldAnnotations                     = "annotations"
+	LdapConfigFieldCertificate                     = "certificate"
+	LdapConfigFieldConnectionTimeout               = "connectionTimeout"
+	LdapConfigFieldCreated                         = "created"
+	LdapConfigFieldCreatorID                       = "creatorId"
+	LdapConfigFieldEnabled                         = "enabled"
+	LdapConfigFieldGroupDNAttribute                = "groupDNAttribute"
+	LdapConfigFieldGroupMemberMappingAttribute     = "groupMemberMappingAttribute"
+	LdapConfigFieldGroupMemberUserAttribute        = "groupMemberUserAttribute"
+	LdapConfigFieldGroupNameAttribute              = "groupNameAttribute"
+	LdapConfigFieldGroupObjectClass                = "groupObjectClass"
+	LdapConfigFieldGroupSearchAttribute            = "groupSearchAttribute"
+	LdapConfigFieldGroupSearchBase                 = "groupSearchBase"
+	LdapConfigFieldLabels                          = "labels"
+	LdapConfigFieldName                            = "name"
+	LdapConfigFieldOwnerReferences                 = "ownerReferences"
+	LdapConfigFieldPort                            = "port"
+	LdapConfigFieldRemoved                         = "removed"
+	LdapConfigFieldServers                         = "servers"
+	LdapConfigFieldServiceAccountDistinguishedName = "serviceAccountDistinguishedName"
+	LdapConfigFieldServiceAccountPassword          = "serviceAccountPassword"
+	LdapConfigFieldTLS                             = "tls"
+	LdapConfigFieldType                            = "type"
+	LdapConfigFieldUserDisabledBitMask             = "userDisabledBitMask"
+	LdapConfigFieldUserEnabledAttribute            = "userEnabledAttribute"
+	LdapConfigFieldUserLoginAttribute              = "userLoginAttribute"
+	LdapConfigFieldUserMemberAttribute             = "userMemberAttribute"
+	LdapConfigFieldUserNameAttribute               = "userNameAttribute"
+	LdapConfigFieldUserObjectClass                 = "userObjectClass"
+	LdapConfigFieldUserSearchAttribute             = "userSearchAttribute"
+	LdapConfigFieldUserSearchBase                  = "userSearchBase"
+	LdapConfigFieldUuid                            = "uuid"
+)
+
+type LdapConfig struct {
+	types.Resource
+	AccessMode                      string            `json:"accessMode,omitempty" yaml:"accessMode,omitempty"`
+	AllowedPrincipalIDs             []string          `json:"allowedPrincipalIds,omitempty" yaml:"allowedPrincipalIds,omitempty"`
+	Annotations                     map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
+	Certificate                     string            `json:"certificate,omitempty" yaml:"certificate,omitempty"`
+	ConnectionTimeout               int64             `json:"connectionTimeout,omitempty" yaml:"connectionTimeout,omitempty"`
+	Created                         string            `json:"created,omitempty" yaml:"created,omitempty"`
+	CreatorID                       string            `json:"creatorId,omitempty" yaml:"creatorId,omitempty"`
+	Enabled                         bool              `json:"enabled,omitempty" yaml:"enabled,omitempty"`
+	GroupDNAttribute                string            `json:"groupDNAttribute,omitempty" yaml:"groupDNAttribute,omitempty"`
+	GroupMemberMappingAttribute     string            `json:"groupMemberMappingAttribute,omitempty" yaml:"groupMemberMappingAttribute,omitempty"`
+	GroupMemberUserAttribute        string            `json:"groupMemberUserAttribute,omitempty" yaml:"groupMemberUserAttribute,omitempty"`
+	GroupNameAttribute              string            `json:"groupNameAttribute,omitempty" yaml:"groupNameAttribute,omitempty"`
+	GroupObjectClass                string            `json:"groupObjectClass,omitempty" yaml:"groupObjectClass,omitempty"`
+	GroupSearchAttribute            string            `json:"groupSearchAttribute,omitempty" yaml:"groupSearchAttribute,omitempty"`
+	GroupSearchBase                 string            `json:"groupSearchBase,omitempty" yaml:"groupSearchBase,omitempty"`
+	Labels                          map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
+	Name                            string            `json:"name,omitempty" yaml:"name,omitempty"`
+	OwnerReferences                 []OwnerReference  `json:"ownerReferences,omitempty" yaml:"ownerReferences,omitempty"`
+	Port                            int64             `json:"port,omitempty" yaml:"port,omitempty"`
+	Removed                         string            `json:"removed,omitempty" yaml:"removed,omitempty"`
+	Servers                         []string          `json:"servers,omitempty" yaml:"servers,omitempty"`
+	ServiceAccountDistinguishedName string            `json:"serviceAccountDistinguishedName,omitempty" yaml:"serviceAccountDistinguishedName,omitempty"`
+	ServiceAccountPassword          string            `json:"serviceAccountPassword,omitempty" yaml:"serviceAccountPassword,omitempty"`
+	TLS                             bool              `json:"tls,omitempty" yaml:"tls,omitempty"`
+	Type                            string            `json:"type,omitempty" yaml:"type,omitempty"`
+	UserDisabledBitMask             int64             `json:"userDisabledBitMask,omitempty" yaml:"userDisabledBitMask,omitempty"`
+	UserEnabledAttribute            string            `json:"userEnabledAttribute,omitempty" yaml:"userEnabledAttribute,omitempty"`
+	UserLoginAttribute              string            `json:"userLoginAttribute,omitempty" yaml:"userLoginAttribute,omitempty"`
+	UserMemberAttribute             string            `json:"userMemberAttribute,omitempty" yaml:"userMemberAttribute,omitempty"`
+	UserNameAttribute               string            `json:"userNameAttribute,omitempty" yaml:"userNameAttribute,omitempty"`
+	UserObjectClass                 string            `json:"userObjectClass,omitempty" yaml:"userObjectClass,omitempty"`
+	UserSearchAttribute             string            `json:"userSearchAttribute,omitempty" yaml:"userSearchAttribute,omitempty"`
+	UserSearchBase                  string            `json:"userSearchBase,omitempty" yaml:"userSearchBase,omitempty"`
+	Uuid                            string            `json:"uuid,omitempty" yaml:"uuid,omitempty"`
+}
+type LdapConfigCollection struct {
+	types.Collection
+	Data   []LdapConfig `json:"data,omitempty"`
+	client *LdapConfigClient
+}
+
+type LdapConfigClient struct {
+	apiClient *Client
+}
+
+type LdapConfigOperations interface {
+	List(opts *types.ListOpts) (*LdapConfigCollection, error)
+	Create(opts *LdapConfig) (*LdapConfig, error)
+	Update(existing *LdapConfig, updates interface{}) (*LdapConfig, error)
+	ByID(id string) (*LdapConfig, error)
+	Delete(container *LdapConfig) error
+}
+
+func newLdapConfigClient(apiClient *Client) *LdapConfigClient {
+	return &LdapConfigClient{
+		apiClient: apiClient,
+	}
+}
+
+func (c *LdapConfigClient) Create(container *LdapConfig) (*LdapConfig, error) {
+	resp := &LdapConfig{}
+	err := c.apiClient.Ops.DoCreate(LdapConfigType, container, resp)
+	return resp, err
+}
+
+func (c *LdapConfigClient) Update(existing *LdapConfig, updates interface{}) (*LdapConfig, error) {
+	resp := &LdapConfig{}
+	err := c.apiClient.Ops.DoUpdate(LdapConfigType, &existing.Resource, updates, resp)
+	return resp, err
+}
+
+func (c *LdapConfigClient) List(opts *types.ListOpts) (*LdapConfigCollection, error) {
+	resp := &LdapConfigCollection{}
+	err := c.apiClient.Ops.DoList(LdapConfigType, opts, resp)
+	resp.client = c
+	return resp, err
+}
+
+func (cc *LdapConfigCollection) Next() (*LdapConfigCollection, error) {
+	if cc != nil && cc.Pagination != nil && cc.Pagination.Next != "" {
+		resp := &LdapConfigCollection{}
+		err := cc.client.apiClient.Ops.DoNext(cc.Pagination.Next, resp)
+		resp.client = cc.client
+		return resp, err
+	}
+	return nil, nil
+}
+
+func (c *LdapConfigClient) ByID(id string) (*LdapConfig, error) {
+	resp := &LdapConfig{}
+	err := c.apiClient.Ops.DoByID(LdapConfigType, id, resp)
+	return resp, err
+}
+
+func (c *LdapConfigClient) Delete(container *LdapConfig) error {
+	return c.apiClient.Ops.DoResourceDelete(LdapConfigType, &container.Resource)
+}
diff --git a/client/management/v3/zz_generated_open_ldap_config.go b/client/management/v3/zz_generated_open_ldap_config.go
new file mode 100644
index 00000000..d961f3c4
--- /dev/null
+++ b/client/management/v3/zz_generated_open_ldap_config.go
@@ -0,0 +1,76 @@
+package client
+
+const (
+	OpenLdapConfigType                                 = "openLdapConfig"
+	OpenLdapConfigFieldAccessMode                      = "accessMode"
+	OpenLdapConfigFieldAllowedPrincipalIDs             = "allowedPrincipalIds"
+	OpenLdapConfigFieldAnnotations                     = "annotations"
+	OpenLdapConfigFieldCertificate                     = "certificate"
+	OpenLdapConfigFieldConnectionTimeout               = "connectionTimeout"
+	OpenLdapConfigFieldCreated                         = "created"
+	OpenLdapConfigFieldCreatorID                       = "creatorId"
+	OpenLdapConfigFieldEnabled                         = "enabled"
+	OpenLdapConfigFieldGroupDNAttribute                = "groupDNAttribute"
+	OpenLdapConfigFieldGroupMemberMappingAttribute     = "groupMemberMappingAttribute"
+	OpenLdapConfigFieldGroupMemberUserAttribute        = "groupMemberUserAttribute"
+	OpenLdapConfigFieldGroupNameAttribute              = "groupNameAttribute"
+	OpenLdapConfigFieldGroupObjectClass                = "groupObjectClass"
+	OpenLdapConfigFieldGroupSearchAttribute            = "groupSearchAttribute"
+	OpenLdapConfigFieldGroupSearchBase                 = "groupSearchBase"
+	OpenLdapConfigFieldLabels                          = "labels"
+	OpenLdapConfigFieldName                            = "name"
+	OpenLdapConfigFieldOwnerReferences                 = "ownerReferences"
+	OpenLdapConfigFieldPort                            = "port"
+	OpenLdapConfigFieldRemoved                         = "removed"
+	OpenLdapConfigFieldServers                         = "servers"
+	OpenLdapConfigFieldServiceAccountDistinguishedName = "serviceAccountDistinguishedName"
+	OpenLdapConfigFieldServiceAccountPassword          = "serviceAccountPassword"
+	OpenLdapConfigFieldTLS                             = "tls"
+	OpenLdapConfigFieldType                            = "type"
+	OpenLdapConfigFieldUserDisabledBitMask             = "userDisabledBitMask"
+	OpenLdapConfigFieldUserEnabledAttribute            = "userEnabledAttribute"
+	OpenLdapConfigFieldUserLoginAttribute              = "userLoginAttribute"
+	OpenLdapConfigFieldUserMemberAttribute             = "userMemberAttribute"
+	OpenLdapConfigFieldUserNameAttribute               = "userNameAttribute"
+	OpenLdapConfigFieldUserObjectClass                 = "userObjectClass"
+	OpenLdapConfigFieldUserSearchAttribute             = "userSearchAttribute"
+	OpenLdapConfigFieldUserSearchBase                  = "userSearchBase"
+	OpenLdapConfigFieldUuid                            = "uuid"
+)
+
+type OpenLdapConfig struct {
+	AccessMode                      string            `json:"accessMode,omitempty" yaml:"accessMode,omitempty"`
+	AllowedPrincipalIDs             []string          `json:"allowedPrincipalIds,omitempty" yaml:"allowedPrincipalIds,omitempty"`
+	Annotations                     map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
+	Certificate                     string            `json:"certificate,omitempty" yaml:"certificate,omitempty"`
+	ConnectionTimeout               int64             `json:"connectionTimeout,omitempty" yaml:"connectionTimeout,omitempty"`
+	Created                         string            `json:"created,omitempty" yaml:"created,omitempty"`
+	CreatorID                       string            `json:"creatorId,omitempty" yaml:"creatorId,omitempty"`
+	Enabled                         bool              `json:"enabled,omitempty" yaml:"enabled,omitempty"`
+	GroupDNAttribute                string            `json:"groupDNAttribute,omitempty" yaml:"groupDNAttribute,omitempty"`
+	GroupMemberMappingAttribute     string            `json:"groupMemberMappingAttribute,omitempty" yaml:"groupMemberMappingAttribute,omitempty"`
+	GroupMemberUserAttribute        string            `json:"groupMemberUserAttribute,omitempty" yaml:"groupMemberUserAttribute,omitempty"`
+	GroupNameAttribute              string            `json:"groupNameAttribute,omitempty" yaml:"groupNameAttribute,omitempty"`
+	GroupObjectClass                string            `json:"groupObjectClass,omitempty" yaml:"groupObjectClass,omitempty"`
+	GroupSearchAttribute            string            `json:"groupSearchAttribute,omitempty" yaml:"groupSearchAttribute,omitempty"`
+	GroupSearchBase                 string            `json:"groupSearchBase,omitempty" yaml:"groupSearchBase,omitempty"`
+	Labels                          map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
+	Name                            string            `json:"name,omitempty" yaml:"name,omitempty"`
+	OwnerReferences                 []OwnerReference  `json:"ownerReferences,omitempty" yaml:"ownerReferences,omitempty"`
+	Port                            int64             `json:"port,omitempty" yaml:"port,omitempty"`
+	Removed                         string            `json:"removed,omitempty" yaml:"removed,omitempty"`
+	Servers                         []string          `json:"servers,omitempty" yaml:"servers,omitempty"`
+	ServiceAccountDistinguishedName string            `json:"serviceAccountDistinguishedName,omitempty" yaml:"serviceAccountDistinguishedName,omitempty"`
+	ServiceAccountPassword          string            `json:"serviceAccountPassword,omitempty" yaml:"serviceAccountPassword,omitempty"`
+	TLS                             bool              `json:"tls,omitempty" yaml:"tls,omitempty"`
+	Type                            string            `json:"type,omitempty" yaml:"type,omitempty"`
+	UserDisabledBitMask             int64             `json:"userDisabledBitMask,omitempty" yaml:"userDisabledBitMask,omitempty"`
+	UserEnabledAttribute            string            `json:"userEnabledAttribute,omitempty" yaml:"userEnabledAttribute,omitempty"`
+	UserLoginAttribute              string            `json:"userLoginAttribute,omitempty" yaml:"userLoginAttribute,omitempty"`
+	UserMemberAttribute             string            `json:"userMemberAttribute,omitempty" yaml:"userMemberAttribute,omitempty"`
+	UserNameAttribute               string            `json:"userNameAttribute,omitempty" yaml:"userNameAttribute,omitempty"`
+	UserObjectClass                 string            `json:"userObjectClass,omitempty" yaml:"userObjectClass,omitempty"`
+	UserSearchAttribute             string            `json:"userSearchAttribute,omitempty" yaml:"userSearchAttribute,omitempty"`
+	UserSearchBase                  string            `json:"userSearchBase,omitempty" yaml:"userSearchBase,omitempty"`
+	Uuid                            string            `json:"uuid,omitempty" yaml:"uuid,omitempty"`
+}
diff --git a/client/management/v3/zz_generated_open_ldap_test_and_apply_input.go b/client/management/v3/zz_generated_open_ldap_test_and_apply_input.go
new file mode 100644
index 00000000..29c48f16
--- /dev/null
+++ b/client/management/v3/zz_generated_open_ldap_test_and_apply_input.go
@@ -0,0 +1,14 @@
+package client
+
+const (
+	OpenLdapTestAndApplyInputType            = "openLdapTestAndApplyInput"
+	OpenLdapTestAndApplyInputFieldLdapConfig = "ldapConfig"
+	OpenLdapTestAndApplyInputFieldPassword   = "password"
+	OpenLdapTestAndApplyInputFieldUsername   = "username"
+)
+
+type OpenLdapTestAndApplyInput struct {
+	LdapConfig *LdapConfig `json:"ldapConfig,omitempty" yaml:"ldapConfig,omitempty"`
+	Password   string      `json:"password,omitempty" yaml:"password,omitempty"`
+	Username   string      `json:"username,omitempty" yaml:"username,omitempty"`
+}
diff --git a/client/management/v3public/zz_generated_free_ipa_provider.go b/client/management/v3public/zz_generated_free_ipa_provider.go
new file mode 100644
index 00000000..cb8b8f3c
--- /dev/null
+++ b/client/management/v3public/zz_generated_free_ipa_provider.go
@@ -0,0 +1,26 @@
+package client
+
+const (
+	FreeIpaProviderType                 = "freeIpaProvider"
+	FreeIpaProviderFieldAnnotations     = "annotations"
+	FreeIpaProviderFieldCreated         = "created"
+	FreeIpaProviderFieldCreatorID       = "creatorId"
+	FreeIpaProviderFieldLabels          = "labels"
+	FreeIpaProviderFieldName            = "name"
+	FreeIpaProviderFieldOwnerReferences = "ownerReferences"
+	FreeIpaProviderFieldRemoved         = "removed"
+	FreeIpaProviderFieldType            = "type"
+	FreeIpaProviderFieldUuid            = "uuid"
+)
+
+type FreeIpaProvider struct {
+	Annotations     map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
+	Created         string            `json:"created,omitempty" yaml:"created,omitempty"`
+	CreatorID       string            `json:"creatorId,omitempty" yaml:"creatorId,omitempty"`
+	Labels          map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
+	Name            string            `json:"name,omitempty" yaml:"name,omitempty"`
+	OwnerReferences []OwnerReference  `json:"ownerReferences,omitempty" yaml:"ownerReferences,omitempty"`
+	Removed         string            `json:"removed,omitempty" yaml:"removed,omitempty"`
+	Type            string            `json:"type,omitempty" yaml:"type,omitempty"`
+	Uuid            string            `json:"uuid,omitempty" yaml:"uuid,omitempty"`
+}
diff --git a/client/management/v3public/zz_generated_open_ldap_provider.go b/client/management/v3public/zz_generated_open_ldap_provider.go
new file mode 100644
index 00000000..7dcbccd9
--- /dev/null
+++ b/client/management/v3public/zz_generated_open_ldap_provider.go
@@ -0,0 +1,26 @@
+package client
+
+const (
+	OpenLdapProviderType                 = "openLdapProvider"
+	OpenLdapProviderFieldAnnotations     = "annotations"
+	OpenLdapProviderFieldCreated         = "created"
+	OpenLdapProviderFieldCreatorID       = "creatorId"
+	OpenLdapProviderFieldLabels          = "labels"
+	OpenLdapProviderFieldName            = "name"
+	OpenLdapProviderFieldOwnerReferences = "ownerReferences"
+	OpenLdapProviderFieldRemoved         = "removed"
+	OpenLdapProviderFieldType            = "type"
+	OpenLdapProviderFieldUuid            = "uuid"
+)
+
+type OpenLdapProvider struct {
+	Annotations     map[string]string `json:"annotations,omitempty" yaml:"annotations,omitempty"`
+	Created         string            `json:"created,omitempty" yaml:"created,omitempty"`
+	CreatorID       string            `json:"creatorId,omitempty" yaml:"creatorId,omitempty"`
+	Labels          map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
+	Name            string            `json:"name,omitempty" yaml:"name,omitempty"`
+	OwnerReferences []OwnerReference  `json:"ownerReferences,omitempty" yaml:"ownerReferences,omitempty"`
+	Removed         string            `json:"removed,omitempty" yaml:"removed,omitempty"`
+	Type            string            `json:"type,omitempty" yaml:"type,omitempty"`
+	Uuid            string            `json:"uuid,omitempty" yaml:"uuid,omitempty"`
+}
diff --git a/compose/zz_generated_compose.go b/compose/zz_generated_compose.go
index aa09bdbd..28da099a 100644
--- a/compose/zz_generated_compose.go
+++ b/compose/zz_generated_compose.go
@@ -32,6 +32,7 @@ type Config struct {
 	Groups                                   map[string]managementClient.Group                                   `json:"groups,omitempty" yaml:"groups,omitempty"`
 	GroupMembers                             map[string]managementClient.GroupMember                             `json:"groupMembers,omitempty" yaml:"groupMembers,omitempty"`
 	Users                                    map[string]managementClient.User                                    `json:"users,omitempty" yaml:"users,omitempty"`
+	LdapConfigs                              map[string]managementClient.LdapConfig                              `json:"ldapConfigs,omitempty" yaml:"ldapConfigs,omitempty"`
 	Tokens                                   map[string]managementClient.Token                                   `json:"tokens,omitempty" yaml:"tokens,omitempty"`
 	DynamicSchemas                           map[string]managementClient.DynamicSchema                           `json:"dynamicSchemas,omitempty" yaml:"dynamicSchemas,omitempty"`
 	Preferences                              map[string]managementClient.Preference                              `json:"preferences,omitempty" yaml:"preferences,omitempty"`