Important: Splunk's built-in system always takes precedence over any external systems. This is the order in which Splunk authenticates a user: 1. Splunk built-in authentication 2. LDAP authentication (if enabled) 3. Scripted authentication (if enabled) https://docs.splunk.com/Documentation/Splunk/4.2.5/Admin/SetupuserauthenticationwithLDAP#Configure_LDAP ... View more