Users and Groups > Add an authentication login domain |  | next

# Add an authentication login domain

You can use an external authentication login domain (also called an enterprise directory) to authenticate users logging in to the appliance instead of maintaining individual local login accounts.

If you replicate the authentication login domain for high availability or disaster tolerance, add the replicated login domain as a separate login domain.

### Prerequisites

- Minimum required session ID privileges: Infrastructure administrator

- Information about the directory service you are adding:

  - Directory name

  - Protocol

  - Base DN (domain name)

  - Directory servers

  - Obtain an X509 certificate from the directory service provider. This certificate ensures the integrity of communication between the appliance and the directory service.

Creating an authentication login domain using REST APIs
`POST /rest/logindomains`

prev | up | next
Delete a local user account | home | Assign roles to an enterprise group

Copyright © 2013-2016 Hewlett Packard Enterprise Development LP