Hello,

I am currently using IWA for Authentication and Oracle for Authorization. I have 15,000+ users. To get Realm driver to work, I had to write a script to bring all users from Active Directory (AD) to my realm tables in Oracle. I am still in the process to assign users with domains. Would it be easier to use AD for Authorization? How will that play out? I read the security manual but still confused. It seems like I will have to create the realm structured tables on AD and give appropriate relationship. It would be helpful to hear from someone who has experience in implementing this.

Thank You,
Sayed

Sayed,

There is no short cut other than creating the realm structured tables on AD by creating an LDAP schema for them. At least not that I am aware of.

Yes, I was afraid of that. I think it's better I stick with Realmdriver/Oracle. Thanks for replying.