diff --git a/defaults/main.yml b/defaults/main.yml
index 39981a3..e04cc1d 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -48,3 +48,7 @@ epas_ldap_base_dn: 'ou=People,dc=example,dc=org'
 epas_ldap_login_return_uri: '/.'
 epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName'
 epas_ldap_starttls_enabled: 'false'
+epas_ldap_authenticated_bind: False
+epas_ldap_bind_principal: 'cn=readuser,ou=People,o=example,c=org'
+#epas_ldap_bind_credentials: 'use a vault file'
+
diff --git a/templates/epas-docker-compose.yml.j2 b/templates/epas-docker-compose.yml.j2
index d5c40a9..7a0b97a 100644
--- a/templates/epas-docker-compose.yml.j2
+++ b/templates/epas-docker-compose.yml.j2
@@ -66,6 +66,10 @@ services:
       - LDAP_DN_BASE={{ epas_ldap_base_dn }}          # DN per la ricerca degli utenti su LDAP, per esempio ou=People,dc=iit,dc=cnr,dc=it
       - LDAP_LOGIN_RETURN={{ epas_ldap_login_return_uri }} # default: /. Indirizzo relativo di reindirizzamento dopo il login LDAP.
       - LDAP_EPPN_ATTRIBUTE_NAME={{ epas_ldap_eppn_attribute_name }}  # default: eduPersonPrincipalName. Campo LDAP utilizzato per il mapping con il campo eppn presente in ePAS.
+{% if epas_ldap_authenticated_bind %}
+      - LDAP_ADMIN_PRINCIPAL={{ epas_ldap_bind_principal }}
+      - LDAP_ADMIN_CREDENTIALS={{ epas_ldap_bind_credentials }}
+{% endif %}
       #### Invio Segnalazioni via email
       #- REPORT_TO=${REPORT_TO}                 # default: epas@iit.cnr.it
       #- REPORT_FROM=${REPORT_FROM}             # default: segnalazioni@epas.tools.iit.cnr.it