---
title: "Domain discovery"
slug: "discovery-domain-discovery"
updated: 2026-11-03T14:48:12Z
published: 2026-11-03T14:48:12Z
canonical: "docs.senhasegura.io/discovery-domain-discovery"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Domain discovery

This document provides information about the **Domain discovery** screen, which allows the configuration of domain-based devices and credentials.

## Path to access

1. On Segura™, in the navigation bar, hover over the **Products menu**, and select **Discovery**.
2. In the side menu, select **Management** > **Discovery.**
3. On the **Discovery** report screen, click the **Add** button.
4. On the **Choose the type of your discovery** screen, click the **Domain** button.

## Settings tab

This tab provides information about general configuration options.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Name*** | Text field | Yes | Defines the name that will identify this configuration. |
| **Domain*** | Dropdown menu | Yes | Select the IP address or domain to be used. |
| **DN Base*** | Text field | Yes | Defines the distinguished name that serves as the base for the search in the directory. |
| **Enable*** | Radio button | Yes | Enables or disables the execution. |

## Connection tab

This tab provides information about connection settings.

### Access using credential from vault section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Access credential** | Dropdown menu | No | Select the credential for the process. |
| **Network Connector** | Dropdown menu | No | Select the network connector to be used. |
| **Configuration password (ex: enable)** | Text field | No | Defines the password used before performing authentication. |
| **Force sudo use** | Toggle button | No | Enables or disables the use of `sudo` for elevated permissions. |

### Access using pool of credentials section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Pool of credentials** | Text field | No | Search for the credentials in the list of included credentials. |
| **Add/Remove selected** | Button | No | Add or remove the selected credentials. |
| **Pool of credentials table** | Table | No | Displays the credential pools. The fields are: *ID, Name,* and *Priority.* |

## Searches tab

This tab provides information about configuring which entities should be included in the process.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Search for credentials** | Checkbox | No | Defines credentials in the process. |
| **Search for devices groups** | Checkbox | No | Defines device groups in the process. |
| **Search for certificates** | Checkbox | No | Defines certificates in the process. |
| **Find DevOps artifacts** | Checkbox | No | Defines DevOps artifacts in the process. |
| **Monitor unauthorized access (1 hour intervals)** | Checkbox | No | Defines whether unauthorized access to credentials is monitored at 1-hour intervals. |
| **Identify accounts in application pools (IIS)** | Checkbox | No | Defines credentials in IIS application pools. |
| **Search FQDN in Windows devices** | Checkbox | No | Defines the *Fully Qualified Domain Name* (FQDN) of Windows devices. |

## Search parameters tab

This tab provides information about the search parameters configuration.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Account form** | Dropdown menu | No | Select the account form used during the process. |
| **DN of the credential filter (leave blank to use DN Base)** | Text field | No | Defines the distinguished name for credential filtering. |
| **DN of the device filter (leave blank to use DN Base)** | Text field | No | Defines the distinguished name (DN) for device filtering. |
| **Account name attribute*** | Text field | Yes | Defines the attribute used to identify the account name. |
| **Hostname attribute** | Text field | No | Defines the attribute used to identify the hostname. |
| **Account domain*** | Text field | Yes | Defines the domain name linked to the account. |
| **Account domain (Short name)** | Text field | No | Defines the short version of the domain name linked to the account. |
| **Use SSL?** | Toggle button | No | Enables or disables the use of SSL during the process. |
| **Bind requires DN?** | Toggle button | No | Enables or disables the requirement of a distinguished name for binding. |
| **Member is DN?** | Toggle button | No | Enables or disables the use of a distinguished name as the member reference. |
| **DN Bind (leave blank to use DN Base)** | Text field | No | Defines the distinguished name used for bind authentication. |

## Filters for search tab

This tab provides information about configuring filters to refine the process.

### Credential search filters section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Add/Remove selected** | Button | No | Adds rows to the table. |
| **Credential search filters table** | Table | No | Allows manual entry of the credential search filters. The field is **Credential filter**. |

### Device search filters section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Add/Remove selected** | Button | No | Adds rows to the table. |
| **Device search filters table** | Table | No | Allows manual entry of the device search filters. The field is **Filter for device**. |

### Plugins for discovery section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Add/Remove selected** | Button | No | Adds rows to the table. |
| **Plugins for discovery table** | Table | No | Allows manual entry of the plugins and ports to be used. The fields are **Plugin** and **Port (separated by commas)**. |

## Windows assets tab

This tab provides information about identifying assets related to Windows environments.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Managed service accounts** | Checkbox | No | Defines whether managed service accounts are included. |
| **Accounts linked to Windows service accounts** | Checkbox | No | Defines whether accounts linked to Windows service accounts are included. |
| **Scheduled tasks** | Checkbox | No | Defines whether scheduled tasks are included. |
| **IIS application pools** | Checkbox | No | Defines whether IIS application pools are included. |
| **SCOM Run As account** | Checkbox | No | Defines whether SCOM Run As accounts are included. |
| **COM+ applications** | Checkbox | No | Defines whether COM+ applications are included. |

## Active Directory tab

This tab provides information about configuring the search for Active Directory entities during the process.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Search user accounts** | Checkbox | No | Defines whether user accounts are included. |
| **Search managed service accounts** | Checkbox | No | Defines whether managed service accounts are included. |
| **Search credentials used as service account** | Checkbox | No | Defines whether credentials assigned as service accounts are included. |
| **Search security groups** | Checkbox | No | Defines whether security groups are included. |
| **Search domain controllers** | Checkbox | No | Defines whether domain controllers are included. |
| **Search computers (devices)** | Checkbox | No | Defines whether devices are included. |

## Execution tab

This tab provides information about scheduling the certificate execution.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Credential scan execution*** | Toggle button | Yes | Defines whether the scan should remain active after importing the certificates. |
| **Days allowed for executions** | Toggle button | No | Define specific days for automation to run. The options are *All days, Sunday, Monday, Tuesday, Wednesday, Thursday, Friday,* and *Saturday*. |
| **Period allowed for execution** | Toggle button | No | Define specific periods for automation to run. The options are *All periods, 08:00 AM - 12:00 PM, 12:00 PM - 4:00 PM, 4:00 PM - 8:00 PM, 8:00 PM - 12:00 AM, 12:00 AM - 04:00 AM, 04:00 AM - 08:00 AM*. |
| **Minimum interval between runs*** | Quantity input | Yes | Defines the minimum number of hours between each automation execution. It is recommended to set at least 8 hours between runs. |

## 

## Import tab

This tab provides information about configuring the import of devices and credentials.

### Import section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Create unique glossary for this discovery** | Toggle button | No | Defines whether a unique glossary is created for the imported items. |

### Device configuration section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Site** | Dropdown menu | No | Select the site associated with the imported devices. |
| **Vendor** | Dropdown menu | No | Select the vendor associated with the imported devices. |
| **Type** | Dropdown menu | No | Select the device type. |
| **Product** | Dropdown menu | No | Select the product associated with the devices. |
| **Tags** | Text field | No | Defines tags to categorize the imported devices. |

## 

### Credential configuration section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Type of privileged credential** | Dropdown menu | No | Select the type of privileged credential to associate. |
| **Type of default credential** | Dropdown menu | No | Select the type of default credential to associate. |

## 

### Device import section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable automatic importation of devices and credentials?** | Toggle button | Yes | Enables or disables the automatic import of devices and credentials. |

### Credential import section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Add/Remove selected** | Button | No | Adds rows to the table. |
| **Username table** | Table | No | Allows manual entry of usernames. The field is **Username**. |

## 

## Review tab

Use the **Review** tab to check all the information entered in the previous tabs.