diff --git a/TODO.text b/TODO.text
index c12b2aa..310e4d0 100644
--- a/TODO.text
+++ b/TODO.text
@@ -1,4 +1,6 @@
 - OAuth2 -> support refresh tokens
 - Localize all the things
 - Setup wizard
-- Logins as jobs
\ No newline at end of file
+- Logins as jobs
+- OpenID Connect - oidc-provider
+- Login from new IP notifications
\ No newline at end of file
diff --git a/config/auth.config.js b/config/auth.config.js
index e451063..8dc366e 100644
--- a/config/auth.config.js
+++ b/config/auth.config.js
@@ -175,6 +175,7 @@ const auth_config = {
         // 'role_name': [ 'permission1', 'permission2' ],
         // Then, users with that role will automatically inherit the permissions.
         ldap_admin: ['ldap'],
+        ldap_client: ['ldap:bind', 'ldap:search'],
         coreid_base: ['my:profile'],
         saml_admin: ['v1:saml', 'saml'],
 
diff --git a/package.json b/package.json
index 4803ca6..6fb01ca 100644
--- a/package.json
+++ b/package.json
@@ -34,7 +34,7 @@
     "ldapjs": "^1.0.2",
     "libflitter": "^0.53.1",
     "moment": "^2.24.0",
-    "mongodb": "^3.5.6",
+    "mongodb": "^3.5.9",
     "nodemailer": "^6.4.6",
     "qrcode": "^1.4.4",
     "samlp": "^3.4.1",
diff --git a/yarn.lock b/yarn.lock
index 5c276c2..5e17b8f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3189,10 +3189,10 @@ mongodb@^3.5.1:
   optionalDependencies:
     saslprep "^1.0.0"
 
-mongodb@^3.5.6:
-  version "3.5.6"
-  resolved "https://registry.yarnpkg.com/mongodb/-/mongodb-3.5.6.tgz#a1be2d9796c8a8a5b0e6bcbc6baaaa406bd5c0d5"
-  integrity sha512-sh3q3GLDLT4QmoDLamxtAECwC3RGjq+oNuK1ENV8+tnipIavss6sMYt77hpygqlMOCt0Sla5cl7H4SKCVBCGEg==
+mongodb@^3.5.9:
+  version "3.5.9"
+  resolved "https://registry.yarnpkg.com/mongodb/-/mongodb-3.5.9.tgz#799b72be8110b7e71a882bb7ce0d84d05429f772"
+  integrity sha512-vXHBY1CsGYcEPoVWhwgxIBeWqP3dSu9RuRDsoLRPTITrcrgm1f0Ubu1xqF9ozMwv53agmEiZm0YGo+7WL3Nbug==
   dependencies:
     bl "^2.2.0"
     bson "^1.1.4"