Accounts

In Security Onion, there are two main types of accounts:

• operating system (OS) accounts

• application accounts used when authenticating to Security Onion Console (SOC)

OS accounts are controlled by standard Linux account utilities. SOC accounts are maintained via the Administration interface. If for some reason you can’t log into SOC, you can use so-user from the command line.

• Passwords
  • OS user account
  • OS root account
  • Password Logins to SOC
  • Passwordless Logins to SOC
• MFA
  • TOTP
  • WebAuthn Security Keys
• Adding Accounts
  • OS
  • SOC
• Listing Accounts
  • OS
  • SOC
• Disabling Accounts
  • OS
  • SOC
• Role-Based Access Control (RBAC)
  • Default Roles
  • Superusers
  • Adding a User With a Specific Role
  • Modifying User Roles
  • Creating Custom Roles
  • Defining Security Onion Roles
• Kratos
  • Configuration
  • More Information
• OpenID Connect (OIDC)
  • Configuration
  • Initial Login
  • Roles
  • Managing OIDC Users
  • OIDC Self Service
  • External Tools