As of December 1, 2020, Focal Point is retired and repurposed as a reference repository. We value the wealth of knowledge that's been shared here over the years. You'll continue to have access to this treasure trove of knowledge, for search purposes only.
Join the TIBCO Community TIBCO Community is a collaborative space for users to share knowledge and support one another in making the best use of TIBCO products and services. There are several TIBCO WebFOCUS resources in the community.
From the Home page, select Predict: WebFOCUS to view articles, questions, and trending articles.
Select Products from the top navigation bar, scroll, and then select the TIBCO WebFOCUS product page to view product overview, articles, and discussions.
Request access to the private WebFOCUS User Group (login required) to network with fellow members.
Former myibi community members should have received an email on 8/3/22 to activate their user accounts to join the community. Check your Spam folder for the email. Please get in touch with us at community@tibco.com for further assistance. Reference the community FAQ to learn more about the community.
Is there a way to authenticate a MRE user against multiple domain on our Active Directory?
We currently have multiple domains within our company. We want to be able to grant access to all the users that belong to any of the domains on our AD. Is this possible?
Thanks, Sayed
WF 8.x and 7.7.x Win/UNIX/AS400, MRE/Portal/Self-Service, IIS/Tomcat, WebSphere, IWA, Realmdriver, Active Directory, Oracle, SQLServer, DB2, MySQL, JD Edwards, E-BIZ, SAP BW, R/3, ECC, ESSBASE
Posts: 285 | Location: Texas | Registered: June 27, 2006
I'm not a guru when it comes to security, but do enough to get by. I don't believe this is possible and is documented as such. However, I have heard that there may be a way to "concatenate" domains within Active Directory, so you still authenticate against a single domain, but within Active Directory, it includes multiple domains. Can't give you much more info than that, so check with your systems person managing Active Directory and see if they know anything about that.
Regards,
Darin
In FOCUS since 1991 WF Server: 7.7.04 on Linux and Z/OS, ReportCaster, Self-Service, MRE, Java, Flex Data: DB2/UDB, Adabas, SQL Server Output: HTML,PDF,EXL2K/07, PS, AHTML, Flex WF Client: 77 on Linux w/Tomcat
Posts: 2298 | Location: Salt Lake City, Utah | Registered: February 02, 2007
Since users actually are assigned to a group rather than a domain, you can create a group that is assigned to all the domains you wish to make available to the users.
WF 7.7.01 Reporting Server on zLinux or Windows Client on linux Output formats - EXL2K, HTML, PDF