topic How to create new user in Splunk with LDAP Authentication in Security

How to create new user in Splunk with LDAP Authentication

alexspunkshell — Fri, 27 Nov 2020 08:44:30 GMT

LDAP is already configured and i see many users with LDAP authentication.

Now i want to create new users with LDAP authendication. But i don't see any options to choose LDAP authentication. Pleas help here.

@isoutamo @ITWhisperer @gcusello @thambisetty

Re: How to create new user in Splunk with LDAP Authentication

gcusello — Fri, 27 Nov 2020 08:50:41 GMT

Hi @alexspunkshell,

if you have LDAP authentication, you cannot create LDAP users in Splunk, only local Splunk users.

To create new LDAP users, you have to add them to one or more LDAP groups in Active Directory and automatically you'll have them in Splunk.

Ciao.

Giuseppe

Re: How to create new user in Splunk with LDAP Authentication

isoutamo — Fri, 27 Nov 2020 08:53:54 GMT

Just add correct group in AD side those user and then add that group mapping to splunk side if needed.
When you are using AD authentication, you don't / shouldn't do anything else than create those needed roles and map those in splunk side. After those have done new users just created when needed. Of course they much match to your ldap user and group binding rules also.

Re: How to create new user in Splunk with LDAP Authentication

alexspunkshell — Fri, 27 Nov 2020 09:09:17 GMT

Thanks for your clarification!

@gcusello @isoutamo