diff --git a/howto/ldap.md b/howto/ldap.md
index b3c070bc353369dd2af19297eaae38c81206e488..f1b6f3a3651edf1ad2d8392d6e6dccd7ed164565 100644
--- a/howto/ldap.md
+++ b/howto/ldap.md
@@ -2265,6 +2265,8 @@ using the [django-auth-ldap][] authentication plugin.
  * [Authentik][]: single sign-on, 2fa, OIDC, SAML, LDAP, proxy,
    metrics
  * [LemonLDAP-ng](https://lemonldap-ng.org/), [packaged in Debian](https://tracker.debian.org/pkg/lemonldap-ng)
+ * [kanidm][]: SSO, 2FA, OIDC, LDAP, Radius, SSH, PAM + offline
+   support, web UI, CLI tools
 
 See also [mod_auth_openidc](https://github.com/OpenIDC/mod_auth_openidc) for an Apache module supporting OIDC.
 
@@ -2275,6 +2277,7 @@ swap ud-ldap out if we need to, replacing bits of it as we go.
 
 [Authelia]: https://www.authelia.com/
 [Authentik]: https://goauthentik.io/
+[kanidm]: https://github.com/kanidm/kanidm
 
 #### Keycloak