Map directory credentials to a domain

Domain management allows you to map a default primary directory credential and an optional fallback credential as preferred binding credentials used for account resolution against domains in your environment when logging in to BeyondInsight.

ℹ️

Note

If credentials are not mapped, or both mapped credentials fail, BeyondInsight attempts login following the legacy process of not using mapped credentials.

Follow these steps to add or edit primary and secondary credentials for a domain:

1. From the left sidebar, click Configuration.
2. Under Role Based Access, click Domain Management.
3. Click Create New Domain + to create a new one.
4. Provide the name of the domain or LDAP server.
5. Select the type of platform.
6. Select a Primary Credential from the dropdown.
7. Select a Fallback Credential from the dropdown.
8. Click Create Domain.
9. To edit credentials for an existing domain, select the domain from the left pane, make your edits, and then click Save Domain.

ℹ️

Note

Primary and fallback credentials can include Password Safe managed accounts.

When domain management is configured for a domain and user selects the domain when logging into BeyondInsight, the specified primary and fallback credentials are used to resolve their account. The credentials used for authentication are shown in the Login Details for the specific login activity on the Configuration > General > User Audits page.