How to configure System Manager for authentication using domain user or group

Process

1. Create an active directory connection with any one of the following methods:
   1. Configure an authentication tunnel (referred to as a domain tunnel)
   2. Starting in ONTAP 9.16.1 create an SVM computer account on the domain (no domain tunnel required)
   3. For ASA r2 Configure active directory domain controller access
2. Add a domain user or group using one of the following methods:
   1. Using System Manager
      1. Navigate to Cluster > Settings, then click  in the Users and Roles tile.
      2. In the Users section, click the  button.
      3. For Target Product select System Manager.
      4. For User Name enter the active directory user in the format of domain\username or domain\group.
      5. Select Role of admin.
      6. For User login methods​​​​​​ select Application of HTTP, Authentication of Active Directory Domain, and Multifactor authentication is Disabled.
      7. Click the Save button.
   2. Using ONTAP CLI
      1. Use the security login create command.
      2. For -vserver supply the admin SVM (the name of the cluster).
      3. For -user-or-group-name enter the active directory user in the format of domain\username or domain\group.
      4. For -authentication-method enter domain.
      5. For -application enter http.
      6. For -role enter admin.
      7. The -second-authentication-method is optional.
3. You can now access System Manager supplying the Active Directory user credentials that were just added:

Video Overview