diff --git a/src/views/users.html b/src/views/users.html
index 450265355..18dfa803f 100644
--- a/src/views/users.html
+++ b/src/views/users.html
@@ -714,7 +714,8 @@
   </div>
 
   <div class="text-left" style="margin-top: 50px;" ng-show="user.isAtLeastAdmin">
-    <h2>{{ 'users.externalLdap.title' | tr }}</h2>
+    <h2>Connect an External Directory</h2>
+    <!-- <h2>{{ 'users.externalLdap.title' | tr }}</h2> -->
   </div>
 
   <div class="card card-large" ng-show="user.isAtLeastAdmin">
@@ -872,10 +873,16 @@
     </div>
   </div>
 
+  <div class="text-left" style="margin-top: 50px;" ng-show="user.isAtLeastAdmin">
+    <h2>User Directory Server</h2>
+  </div>
+
   <div class="card card-large" ng-show="user.isAtLeastAdmin">
     <div class="row">
       <div class="col-md-12">
-        <div>{{ 'users.exposedLdap.description' | tr }}</div>
+        <div>
+          Cloudron can act as a central user directory server for external applications.
+        </div>
 
         <br/>
 
@@ -883,9 +890,15 @@
           <fieldset ng-disabled="exposedLdapConfig.busy">
             <div class="checkbox">
               <label>
-                <input type="checkbox" ng-model="exposedLdapConfig.enabled"> {{ 'users.exposedLdap.enable' | tr }} <sup><a ng-href="https://docs.cloudron.io/user-management/#exposed-ldap" class="help" target="_blank"><i class="fa fa-question-circle"></i></a></sup>
+                <input type="checkbox" ng-model="exposedLdapConfig.enabled"> Enabled <sup><a ng-href="https://docs.cloudron.io/user-management/#exposed-ldap" class="help" target="_blank"><i class="fa fa-question-circle"></i></a></sup>
               </label>
             </div>
+            <div class="form-group">
+              <label class="control-label">Restrict Access</label>
+              <p class="small">The directory server can be limited to specific IPs or ranges.</p>
+              <div class="has-error" ng-show="exposedLdapConfig.error.allowlist">{{ exposedLdapConfig.error.allowlist }}</div>
+              <textarea ng-model="exposedLdapConfig.allowlist" placeholder="Line separated IP address or Subnet" name="allowlist" class="form-control" ng-class="{ 'has-error': !exposedLdapConfigForm.allowlist.$dirty && exposedLdapConfig.error.allowlist }" rows="4"></textarea>
+            </div>
           </fieldset>
         </form>
 
diff --git a/src/views/users.js b/src/views/users.js
index 47d2314e8..4a5d54b8c 100644
--- a/src/views/users.js
+++ b/src/views/users.js
@@ -696,6 +696,7 @@ angular.module('Application').controller('UsersController', ['$scope', '$locatio
 
     $scope.exposedLdapConfig = {
         enabled: false,
+        allowlist: '',
         errorMessage: '',
 
         refresh: function () {