For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HerrDrachen's avatar
HerrDrachen
Icon for Altocumulus rankAltocumulus
Sep 27, 2022
Solved

Multiple AD Authentication

We have AD users in other domains that have a two-way trust with ours.  We have people in two-way trusted domains that also need access to the same tenants.  We are struggling to figure out how to in...
security
  • buulam's avatar
    buulam
    Sep 30, 2022

    I'm guessing on the User Directory dropdown, you don't see "Remote - APM Based"? I believe you need APM (Limited Mode) provisioned to unlock that. Keep in mind that provisioning may require a short change window.

buulam's avatar
buulam
Icon for Admin rankAdmin
Sep 29, 2022

Hey HerrDrachen can you clarify if you're referring to an APM access scenario or device management access?

HerrDrachen's avatar
HerrDrachen
Icon for Altocumulus rankAltocumulus
Sep 30, 2022

This is in relation to device management access.  We are made up of 6 organizations using 6 different AD domains but all in the same forest.  I created partitions in the tenant for each of them and I would like them to be managers of their own partitions.  The domain listed in the device for LDAP purposes is xyz.com, so users in 123.com, abc.com, etc are not showing up even though we have a two-way trust between xyz.com and all of the others.  In some of the other tools we use, AD either understands the trust and they just login with the normal domain credentials or we have to add each AD domain in individually.