diff --git a/faq.rst b/faq.rst index 59544360..5c37f78b 100644 --- a/faq.rst +++ b/faq.rst @@ -201,6 +201,7 @@ Please see the :ref:`detections` section. Can I connect Security Onion to Active Directory or LDAP? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -We understand the appeal of integrating with directory services like Active Directory and LDAP, but we typically recommend against joining any security infrastructure (including Security Onion) to directory services. The reason is that when you get an adversary inside your network, one of their first goals is going to be gaining access to that directory. If they get access to the directory, then they get access to everything connected to the directory. For that reason, we recommend that all security infrastructure (including Security Onion) be totally separate from directory services. + +Please see the :ref:`oidc` section. `back to top <#top>`__