11[[active-directory-realm]]
2- === Active Directory User Authentication
2+ === Active Directory user authentication
33
44You can configure {security} to communicate with Active Directory to authenticate
55users. To integrate with Active Directory, you configure an `active_directory`
@@ -33,26 +33,25 @@ retrieves the user's group memberships from the `tokenGroups` attribute on the
3333user's entry in Active Directory.
3434
3535[[ad-load-balancing]]
36- ==== Load Balancing and Failover
36+ ==== Load balancing and failover
3737The `load_balance.type` setting can be used at the realm level to configure how
3838{security} should interact with multiple Active Directory servers. Two modes of
3939operation are supported: failover and load balancing.
4040
4141See {ref}/security-settings.html#load-balancing[Load Balancing and Failover Settings].
4242
4343[[ad-settings]]
44- ==== Active Directory Realm Settings
44+ ==== Active Directory realm settings
4545
4646See {ref}/security-settings.html#ref-ad-settings[Active Directory Realm Settings].
4747
4848[[mapping-roles-ad]]
49- ==== Mapping Active Directory Users and Groups to Roles
49+ ==== Mapping Active Directory users and groups to roles
5050
5151See {ref}/configuring-ad-realm.html[Configuring an Active Directory realm].
5252
5353[[ad-user-metadata]]
54- ==== User Metadata in Active Directory Realms
55-
54+ ==== User metadata in Active Directory realms
5655When a user is authenticated via an Active Directory realm, the following
5756properties are populated in the user's _metadata_:
5857
@@ -72,7 +71,7 @@ Additional metadata can be extracted from the Active Directory server by configu
7271the `metadata` setting on the Active Directory realm.
7372
7473[[active-directory-ssl]]
75- ==== Setting up SSL Between Elasticsearch and Active Directory
74+ ==== Setting up SSL between Elasticsearch and Active Directory
7675
7776See
78- {ref}/configuring-tls.html#tls-active-directory[Encrypting communications between {es} and Active Directory].
77+ {ref}/configuring-tls.html#tls-active-directory[Encrypting communications between {es} and Active Directory].
0 commit comments