---
title: "How to add a domain discovery"
slug: "discovery-how-to-add-a-domain-discovery"
updated: 2026-11-03T14:48:12Z
published: 2026-11-03T14:48:12Z
canonical: "docs.senhasegura.io/discovery-how-to-add-a-domain-discovery"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to add a domain discovery

This guide explains how to register a **Domain**-type *discovery* on the Segura™ platform, enabling automatic detection of assets related to Active Directory, such as accounts, devices, and services.

## Access path

1. Click **Management** in the left-hand menu.
2. Select **Discovery**.
3. Click **Add** and select **Domain**.

## Fill in the initial settings

1. Enter a unique name in the **Name** field.
2. Select the **Domain**.
3. Fill in the **DN Base** field.
4. Set the **Active** option to **Yes** or **No**.
5. Click **Continue**.

## Configure access credentials

1. Under **Access using credential from vault**, do the following:
  - Select the **Access credential** stored in the vault.
  - Choose the **Network Connector** if applicable.
  - Provide the **Configuration password (ex: enable)** if needed.
  - Enable **Force sudo use** if privileged commands are required.
2. Under **Access using pool of credentials**, click **Add** and select one or more available pools.
3. Click **Continue**.

## Select search objects

1. Choose the objects you want to discover:
  - Search for credentials
  - Search for device groups
  - Search for certificates
  - Find DevOps artifacts
  - Monitor unauthorized access (1-hour intervals)
  - Identify accounts in application pool (IIS)
  - Search FQDN on Windows devices
2. Click **Continue**.

## Define search parameters

1. Select the **Account form**.
2. Fill in the DN filters if needed:
  - **DN of the credential filter (leave blank to use DN Base)**
  - **DN of the device filter (leave blank to use DN Base)**
3. Configure the LDAP attributes:
  - **Account name attribute***
  - **Hostname attribute**
  - **Account domain***
  - **Account domain (Short Name)**
4. Set the toggles as needed:
  - **Use SSL?**
  - **Bind requires DN?**
  - **Member is DN?**
5. Fill in **DN Bind** if applicable.
6. Click **Continue**.

## Apply search filters

1. Under **Credential filter**, click **Add** to set filters.
2. Under **Device filter**, click **Add** to define specific rules.
3. Under **Plugins for discovery**, click **Add** to configure *plugins* and ports.
4. Click **Continue**.

## Configure Windows asset collection

1. Select the components to discover:
  - Managed service accounts
  - Accounts linked to Windows service accounts
  - Scheduled tasks
  - IIS application pools
  - SCOM Run As account
  - COM+ applications
2. Click **Continue**.

## Select Active Directory objects

1. Choose which AD objects to include:
  - Search user accounts
  - Search managed service accounts
  - Search credentials used as service accounts
  - Search security groups
  - Search domain controllers
  - Search computers (devices)
2. Click **Continue**.

## Set execution rules

1. Enable **Keep scan active after import?** if desired.
2. Select the **Days allowed for execution**.
3. Select the **Periods allowed for execution**.
4. Set the **Minimum interval between executions (in hours)**.
5. Click **Continue**.

## Configure import settings

1. Enable **Create exclusive glossary for this discovery** if needed.
2. Fill in the **Device configuration** fields:
  - **Site**, **Vendor**, **Type**, **Product**, and **Tags**
3. Under **Credential configuration**, set the default and privileged credential types.
4. Under **Device import**, choose whether to enable automatic import.
5. Under **Credential import**, click **Add** to define usernames for import.
6. Click **Continue**.

## Additional tabs displayed based on search options

When you enable **Search certificates** or **Search DevOps artifacts**, additional tabs appear to configure specific search parameters.

### **Certificates tab**

Configure the certificate discovery options:

- **Certificates origin**: Apache, Nginx, Tomcat, IIS, Workstation Windows, IBM Websphere, Microsoft CA, Palo Alto, Kubernetes, NetScaler.
- **Search certificates in directories**
- **Search certificates without login**
- **Import all certificates automatically**
- **Extra settings for F5/BigIP**: Configure the SOAP port.

### **DevOps tab**

Configure DevOps tool integration:

- **Ansible**
  - Enable service
  - Search playbooks
  - Search roles
  - Search hosts
- **Jenkins**
  - Enable service
  - Access token
  - Access port
  - Search jobs
  - Search nodes
  - Search users
- **Kubernetes**
  - Enable service
  - Select credential
  - Access port
  - Search secrets
  - Bearer token

## Review the configuration

1. In the **Review** tab, confirm all information entered in the previous steps.
2. After reviewing, click **Save** to register the discovery.