diff --git a/CHANGELOG.md b/CHANGELOG.md
index 04ce27a5..03557c50 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 ## 3.5.1.dev
 
 * Fix: auth/htpasswd related to detection and use of bcrypt
+* Add: option [auth] ldap_ignore_attribute_create_modify_timestamp for support of Authentik LDAP server
 
 ## 3.5.0
 
diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md
index 16b4518b..838625c2 100644
--- a/DOCUMENTATION.md
+++ b/DOCUMENTATION.md
@@ -1065,8 +1065,8 @@ Default:
 _(>= 3.5.1)_
 
 Add modifyTimestamp and createTimestamp to the exclusion list of internal ldap3 client
-so that these schema attributes are not checked. This is needed for Authentik since
-Authentik does not provide these both attributes.
+so that these schema attributes are not checked. This is needed at least for Authentik
+LDAP server as not providing these both attributes.
 
 Default: false
 
diff --git a/config b/config
index 273763de..6b409c72 100644
--- a/config
+++ b/config
@@ -74,8 +74,8 @@
 ## Expiration time of caching failed logins in seconds
 #cache_failed_logins_expiry = 90
 
-# Ignore modifyTimestamp and createTimestamp attributes. Needed if Authentik LDAP server is used. Uncomment then.
-#ldap_ignore_attribute_create_modify_timestamp = true  
+# Ignore modifyTimestamp and createTimestamp attributes. Required e.g. for Authentik LDAP server
+#ldap_ignore_attribute_create_modify_timestamp = false
 
 # URI to the LDAP server
 #ldap_uri = ldap://localhost