APM AD auth and multi-domain forest

Talked this over with my friendly neighborhood AD expert, and he helped me figure out a working solution.

Since the various domains/realms won't answer queries for other domains, I have used a empty object in my VPE with a branch for each domain that inspects session.logon.last.domain to get the domain provided by the end user (Split domain from username is enabled). This then feeds into a bunch of AD auth objects, tailored for each realm required. I use a macro after that for the resource assignment.

HTH

Josh