For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jspiglerj2rsolves's avatar
jspiglerj2rsolves
Icon for Nimbostratus rankNimbostratus
May 06, 2016

KCD SmartCard Two Domains Same Forest Users in both

Afternoon all,   Have a KCD APM question.   I have successfully been able to setup KCD in a singe domain instance. Both the resource the client is accessing, the F5 KCD account and the clients...
application delivery
BIG-IP Access Policy Manager (APM)
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 09, 2016

This doesn't have anything to do with delegation. You simply cannot "chase" a referral to the correct domain, assuming you didn't already know what it was. If you're specifying the correct domain in the SSO then you don't have to chase a referral. Coincidentally, if the UPN domain doesn't match the real domain name, then it also involves referrals, which is why you'd use the sAMAccountName instead.