Security

How to use email or User Principle Name (UPN) instead of the Active Directory login?

jhillenburg
Path Finder

We currently have our users log into Splunk using their Active Directory (AD) credentials, and specifically the SamAccountName field. In the LDAP strategies pane, there is an option for changing this field. I would like to use email or User Principle Name (UPN). Has anyone done this, and does it present a problem?

Thanks.

0 Karma

brreeves_splunk
Splunk Employee
Splunk Employee

Yes, you can set authentication.conf > userNameAttribute to either "mail" or "userPrincipalName" and login with either.

In my test setup (which I confirmed this in), my email address is the username for both, and after setting it to the respective values, I was able to log in both times.

http://docs.splunk.com/Documentation/Splunk/6.5.2/Admin/Authenticationconf#LDAP_settings

Get Updates on the Splunk Community!

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...