vRealize Log Insight has a built-in authentication method that you can use to authenticate users.
About this task
When you create new user accounts by using the built-in authentication method, you provide users with passwords that they must use to log in to vRealize Log Insight.
To avoid having users remember multiple passwords, you can enable the support for Active Directory authentication.
Verify that you are logged in to the vRealize Log Insight Web user interface as a user with the Edit Admin permission. The URL format is https://log-insight-host, where log-insight-host is the IP address or host name of the vRealize Log Insight virtual appliance.
- Click the configuration drop-down menu icon and select Administration.
- Under Configuration, click Authentication.
- Select Enable Active Directory support.
- In the Default Domain text box, type a domain name.
For example, company-name.com.Note:
You cannot list multiple domains in the default domain text box. If the default domain that you specify is trusted by other domains, vRealize Log Insight uses the default domain and the binding user to verify AD users and groups in the trusting domains.
If you switch to a different domain that already includes users and groups, the authentication will fail for the existing users and groups, and data saved by the existing users will be lost.
- If you have geo-located or security-restricted domain controllers, manually specify the domain controllers closest to this vRealize Log Insight instance.
- Enter the credentials of a binding user that belongs to the default domain.
vRealize Log Insight uses the default domain and the binding user to verify AD users and groups in the default domain, and in domains that trust the default domain.
- Specify values for the connection type.
This connection is used for Active Directory authentication.
- Click Save.
What to do next
Give permissions to AD users and groups to access the current instance of vRealize Log Insight. See Add an Active Directory User to vRealize Log Insight.