diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml
index 106075b..54baa9b 100644
--- a/apps/opencloud/opencloud-deployment.yaml
+++ b/apps/opencloud/opencloud-deployment.yaml
@@ -268,34 +268,34 @@ spec:
               name: opencloud-config-secrets
               key: graph-application-id
 
-        # LDAP bind passwords (commented out - using built-in IDM instead of external LDAP)
-        # - name: OC_GRAPH_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: graph-ldap-bind-password
-        # - name: OC_IDP_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: idp-ldap-bind-password
-        # - name: OC_USERS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
-        # - name: OC_GROUPS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
+        # LDAP bind passwords
+        - name: OC_GRAPH_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: graph-ldap-bind-password
+        - name: OC_IDP_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: idp-ldap-bind-password
+        - name: OC_USERS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
+        - name: OC_GROUPS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
 
-        # External OpenLDAP admin password (commented out - using built-in IDM)
-        # - name: OPENLDAP_ADMIN_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: openldap-admin-secret
-        #       key: admin-password
+        # External OpenLDAP admin password (for user/group storage)
+        - name: OPENLDAP_ADMIN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: openldap-admin-secret
+              key: admin-password
 
         # IDM service user passwords
         - name: OC_IDM_ADMIN_PASSWORD
@@ -337,11 +337,11 @@ spec:
             secretKeyRef:
               name: opencloud-config-secrets
               key: graph-application-id
-        # - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: graph-ldap-bind-password
+        - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: graph-ldap-bind-password
         - name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
           valueFrom:
             secretKeyRef:
@@ -356,11 +356,11 @@ spec:
           value: "false"
         - name: GRAPH_USERNAME_MATCH
           value: "none"
-        # - name: IDP_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: idp-ldap-bind-password
+        - name: IDP_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: idp-ldap-bind-password
         - name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD
           valueFrom:
             secretKeyRef:
@@ -416,16 +416,16 @@ spec:
             secretKeyRef:
               name: opencloud-config-secrets
               key: storage-mount-id
-        # - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
-        # - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
+        - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
+        - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
         - name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
           valueFrom:
             secretKeyRef: