Hello, I confirm there is no bug, but the escaping is a little weird, as we need two \\ to escape the , character. Config sample: uri ldap://127.0.0.1/dc=test,dc=example,dc=com idassert-bind bindmethod="simple" binddn="cn=OUDOT\\, Clement,ou=users,dc=example,dc=com" credentials="secret" mode="legacy" flags="non-prescriptive" Thanks a lot to Michael Stroeder for his help. Clement.