How to read and synchronize users from multiple Active directory domains?

We have 3 different AD domains and should have the users of all of them in our ivy5 application

activedirectory ldap

asked 17.03.2014 at 17:09

Alex Zeiter
(suspended)
accept rate: 0%

I think this is not possible. As far as I know, you can only connect to one ActiveDirectory.

(25.04.2014 at 13:34) Nikel Weis

One Answer:

It works if you synchronize the users with your own logic.

Create an application that uses the Ivy Security System instead of the official 'Microsoft Active Directory.
Set-up a simple process that runs every night (e.g. with a Timed Start Event). Within this process you can modify valid Axon.ivy Users and Roles by using official API. ivy.session.getSecurityContext().createXYZ.
To get users of the different Active Directory Systems you can use the Ldap-Beans which give you a simple interface and spits out matching users of the LDAP accoring to your queries.
To verify that the synchronized users are really allowed to use your system I'd use an IIS front-end server that handles the authentication. (and IIS can easily handle complex AD-Forests)

alt text

link

answered 18.05.2018 at 04:17

Reguel Werme... ♦♦
9.4k●3●19●58
accept rate: 70%

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

Tags:

Asked: 17.03.2014 at 17:09

Seen: 4,197 times

Last updated: 18.05.2018 at 10:31