We have 3 different AD domains and should have the users of all of them in our ivy5 application

asked 17.03.2014 at 17:09

Alex%20Zeiter's gravatar image

Alex Zeiter
1111
accept rate: 0%

edited 18.05 at 04:19

Reguel%20Wermelinger's gravatar image

Reguel Werme... ♦♦
7.1k11342

1

I think this is not possible. As far as I know, you can only connect to one ActiveDirectory.

(25.04.2014 at 13:34) Nikel Weis Nikel%20Weis's gravatar image

It works if you synchronize the users with your own logic.

  • Create an application that uses the Ivy Security System instead of the official 'Microsoft Active Directory.
  • Set-up a simple process that runs every night (e.g. with a Timed Start Event). Within this process you can modify valid Axon.ivy Users and Roles by using official API. ivy.session.getSecurityContext().createXYZ.
  • To get users of the different Active Directory Systems you can use the Ldap-Beans which give you a simple interface and spits out matching users of the LDAP accoring to your queries.
  • To verify that the synchronized users are really allowed to use your system I'd use an IIS front-end server that handles the authentication. (and IIS can easily handle complex AD-Forests)

alt text

link

answered 18.05 at 04:17

Reguel%20Wermelinger's gravatar image

Reguel Werme... ♦♦
7.1k11342
accept rate: 70%

edited 18.05 at 04:25

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×13
×8

Asked: 17.03.2014 at 17:09

Seen: 1,089 times

Last updated: 18.05 at 10:31