diff --git a/lib/config/default.js b/lib/config/default.js
index 46c89a4f3..fe699a6d5 100644
--- a/lib/config/default.js
+++ b/lib/config/default.js
@@ -133,7 +133,8 @@ module.exports = {
     searchAttributes: undefined,
     usernameField: undefined,
     useridField: undefined,
-    tlsca: undefined
+    tlsca: undefined,
+    starttls: undefined
   },
   saml: {
     idpSsoUrl: undefined,
diff --git a/lib/web/auth/ldap/index.js b/lib/web/auth/ldap/index.js
index b501106dc..78d82dbf0 100644
--- a/lib/web/auth/ldap/index.js
+++ b/lib/web/auth/ldap/index.js
@@ -19,7 +19,8 @@ passport.use(new LDAPStrategy({
     searchBase: config.ldap.searchBase || null,
     searchFilter: config.ldap.searchFilter || null,
     searchAttributes: config.ldap.searchAttributes || null,
-    tlsOptions: config.ldap.tlsOptions || null
+    tlsOptions: config.ldap.tlsOptions || null,
+    starttls: config.ldap.starttls || null
   }
 }, function (user, done) {
   var uuid = user.uidNumber || user.uid || user.sAMAccountName || undefined