Skip to content
Home logo
Investigator docs User management
Type to start searching
    • Home
    • |
    • System settings
    • Investigator Release Notes
    • Quickstart
    • Working with Investigator
    • Security and network overview
    • Explore data through Dashboards
    • Work with alerts & detections
      • Identify and manage threats through the Detections page
      • Machine learning detections
      • Search-based alerts
      • Normalized severity scores
      • CrowdStrike data in detections
      • MS Defender data in detections
      • Block an IP through Palo Alto
    • Find details in the logs
    • Federated tenants
    • Account settings
      • Account alias
      • Cookies
      • Password
      • Two-factor authentication
      • Theme settings
    • System settings
      • Licensing
      • Autoclose detections
      • Alert Catalog
      • Audit activities through logs
      • Sensor monitoring and management
      • User management
        • Local user management
        • SAML SSO user management
      • GPT integration
      • ServiceNow integration
      • CrowdStrike EDR integration
      • Microsoft Defender integration
      • Palo Alto integration
      • Alert Exports
    • Corelight Sensor docs
    • Corelight Support
    • corelight.com
    • Privacy policy



    • Investigator logo

    User management¶

    Admin users can manage users and authentication options from System Settings | Users & Access.

    Investigator provides these authentication options:

    • Local user management
    • SAML SSO user management
    Previous Sensor monitoring and management
    Next Local user management
    © Copyright 2025 Corelight. Last updated on 2025-03-27 15:20:53.421870.