diff --git a/snippets/ldap-auth.conf b/snippets/ldap-auth.conf
new file mode 100644
index 0000000000000000000000000000000000000000..55f4cbcd87d4df2b5b3f442bb498a573760eb8e1
--- /dev/null
+++ b/snippets/ldap-auth.conf
@@ -0,0 +1,15 @@
+auth_request    /validate;
+
+location = /validate {
+  proxy_pass                        https://auth.shore.co.il/validate;
+  proxy_http_version                1.1;
+  proxy_ssl_verify                  on;
+  proxy_ssl_verify_depth            3;
+  proxy_ssl_name                    auth.shore.co.il;
+  proxy_ssl_server_name             on;
+  proxy_ssl_trusted_certificate     /etc/ssl/certs/ca-certificates.crt;
+  internal;
+  include                           snippets/proxy-headers.conf;
+  proxy_pass_request_body           off;
+  proxy_set_header Content-Length   "";
+}