https://community.splunk.com/t5/Security/LDAP-authentication-to-Active-Directory-Trusts/m-p/296376#M7936 <P>I have an environment where users are authenticated against a domain, and this works perfectly. However I would like to map roles to groups that live in a seperate trusted domain.</P> <P>How would I do this in Splunk?</P> Thu, 29 Mar 2018 04:10:13 GMT gonz0 2018-03-29T04:10:13Z https://community.splunk.com/t5/Security/LDAP-authentication-to-Active-Directory-Trusts/m-p/296376#M7936 <P>I have an environment where users are authenticated against a domain, and this works perfectly. However I would like to map roles to groups that live in a seperate trusted domain.</P> <P>How would I do this in Splunk?</P> Thu, 29 Mar 2018 04:10:13 GMT https://community.splunk.com/t5/Security/LDAP-authentication-to-Active-Directory-Trusts/m-p/296376#M7936 gonz0 2018-03-29T04:10:13Z https://community.splunk.com/t5/Security/LDAP-authentication-to-Active-Directory-Trusts/m-p/296377#M7937 <P>Giving this a bump and adding some more information.</P> <P>MS AD domains are configured as a bi-directional trust and I can confirm this is operational by creating shares etc. for groups in the opposite domain.</P> <P>On Splunk I have tried configuring seperate strategies, however these get evaluated top down and stop evaluating on match. I have also created identical roles in both domains which evaluates, but again, if the same name exists and I want to match the 2nd strategy, this will break.</P> <P>I have tried configuring the primary domain and the secondary domain in the group lookup, however Splunk complains that the secondary domain is incorrect.</P> <P>This seems to me like the ability to use trusted groups is an "Active Directory feature" and Splunk is "only doing LDAP". Is this statement accurate?</P> <P>If so, what are my options? I'm guessing ADFS or SAML/SSO will solve this and possibly give me the functionality I want</P> Tue, 10 Apr 2018 22:08:18 GMT https://community.splunk.com/t5/Security/LDAP-authentication-to-Active-Directory-Trusts/m-p/296377#M7937 gonz0 2018-04-10T22:08:18Z