Security Configurations
The Security Agent is primarily responsible for authentication and security within Aiimi Insight Engine. It runs a Sync with an Active Directory to generate a list of domain users and groups to store locally in elastic. These groups, permissions, and users are verified and visible within Elastic under the [prefix]_security_principals and [prefix]_security_groups indices.
The Agent also handles logins when logging in to Aiimi Insight Engine via the login page. It is not involved when using ADFS or Windows Auth to login. The submitted username is checked against all stored security principals (users) to find a match. The Security Agent then passes to the configured AD where the password is verified.