diff --git a/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md b/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md
index fdd9cb33..0b787a34 100755
--- a/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md
+++ b/foundation/www/docs/user/manual/en/setting-up/integrations/ldap-integration.md
@@ -18,3 +18,9 @@ To enable ldap service, you need to configure parameters like LDAP Server Url, O
 After setting up LDAP parameters, on login screen, the system enables **Login Via LDAP** option.
 
 <img class="screenshot" alt="LOGIN via LDAP" src="{{docs_base_url}}/assets/img/setup/integrations/login_via_ldap.png">
+
+#### Connecting to LDAP Securely
+
+In the LDAP Settings area, there are two dropdowns.
+1. SSL/TLS Mode - set this to **StartTLS** to connect to your LDAP server using StartTLS. If your LDAP server does not support StartTLS, setting this to StartTLS will result in an error `StartTLS is not supported`. Check the configuration on your LDAP server if you receive this error.
+2. Require Trusted Certificate - if you change this to **Yes** then the certificate provided by the LDAP server must be trusted by the Frappe/ERPNext server. If you would rather use StartTLS with a self-signed (untrusted) certificate, set this to **No**. If you do not use StartTLS, this setting is ignored.