MOSS Forum

 
Home » Forum » MOSS       Ask a questionRSS Feeds

Authenticating against multiple domains in SP 2007 or 2010

  Asked By: Shauna Lambert         Date: Jan 22, 2010      Category: MOSS      Views: 1028
 

I think I might have lost part of my brain..but for whatever reason, I am having
difficulty making this work.
Can some one help me out?
I have MOSS 2007 installed and working in domain a and need to allow users in
domain b to also authenticate and use MOSS.
What do I need to do?

Tagged:                  

 

4 Answers Found

 
Answer #1       Answered By: Shobhana R.          Answered On: Jan 22, 2010       

Domain B Trusted by Domain A? If so then you shouldn't need to do anything.
Just type the name into the people picker in the form of Domain\username and
it should resolve. If there isn't a trust relationship then you would need
to extend the web app to a new zone and implement an ADMembershipProvider
that points to Domain B. Or create a trust between Domain A and Domain B.

 
Answer #2       Answered By: Winston Ayers          Answered On: Jan 22, 2010       

We have been looking at how to do this in an extranet where there is no trust
from the DMZ domain into the internal AD. We have been looking at ADFS but there
are various issues with things like the people picker and the amount of manual
administration.

Someone suggested the product from http://www.optimalidm.com which is a
directory proxy. It can present multiple backend directories to SharePoint as if
they were one LDAP directory. It can create dynamic virtual groups based on
directory attributes. They also have a custom people picker, although it looks
like only for SP2010.

Does anyone have any experience with this product they can share?

 
Answer #3       Answered By: Moshe Harding          Answered On: Jan 22, 2010       

If this is the case, wouldn't it be a matter of the DMZ domain trusting the
internal domain? Is the concern about exposing internal log-in information to
the DMZ network?

 
Answer #4       Answered By: Carly Meyer          Answered On: Jan 22, 2010       

In this environment, security do not want to allow a trust to the internal
network.

 
Didn't find what you were looking for? Find more on Authenticating against multiple domains in SP 2007 or 2010 Or get search suggestion and latest updates.


Your Answer
  • Answer should be atleast 30 Characters.
  • Please put code inside [Code] your code [/Code].