ADFS server pointing to multiple top level domains

Hi,
I have two separate Active Directory Forests setup in my environment (domainA.net and domainB.net) Each forest has a few child subdomains.
I would like one ADFS website to allow authentication for both AD forests in my environment.
Is there a way for me to configure that?
Please advise.
Thanks,

If there's no forest trust between the two AD forests, then you'll need an additional AD FS installation in the forest where it doesn't currently exist. For example, if the AD FS instance exists in ForestB, then a separate AD FS instance is required in
Forest A.. from the AD FS setup in Forest B, the Forest A AD FS instance can be configured as a claims provider and Forest B is configured as a relying party on the Forest A instance.. In other words, you're building a circle of trust.. this can be via legacy
means (using a forest trust or two-way trust subject to your requirements) or via a federation trust using AD FS, via the claims provider approach I described... post back if you need more info..
http://blog.auth360.net

Similar Messages

DNS Server does not resolve new generic Top Level Domain names- CNR configuration issue?

Hi all,
I am not sure if this is the correct community to post this question, but I will give it a try. I noticed that the users of my network cannot resolve web sites using new top level domain names, like ".education", ".international", etc. I have an internal DNS server made by Infoblox and a Cisco CNR v6.3.3.1 as an external DNS server. Infoblox uses CNR as its forwarder and CNR uses the root DNS servers for queries.
I would think that CNR was the problem because it is an obsolete product but after speaking with a fellow engineer at another organization where they still use an older version of CNR than mine, they have no problems at all. So now I am thinking it is a setting either on Infoblox, or on CNR I need to change. I can see Infoblox is forwarding the requests to CNR but that's about it. I am not sure if CNR is discarding the request. When I do an nslookup from a PC in my network it does not matter if I set my DNS server to be the Infoblox or the CNR. Neither resolves the URL.
Then again, no matter what I lookup using the CNR as my DNS, I only get a response with the root DNS names and IPs!
Any help is appreciated!

Hi Constantinos,
Have you taken a look at the infoblox community site? We've just reposted your question there and alerted some internal SMEs that should provide a solution soon.
https://community.infoblox.com/forum/ddi/dns-server-does-not-resolve-new-generic-top-level-domain-names-cnr-configuration-issue
Best,
Eric

How to stop location bar autocomplete from using top-level domains?

I love the location bar autocomplete - or at least, I used to. I had it trained to the point where typing one letter was enough to bring up the pages I used most often. But now with Firefox 12, it ignores all that and favors top-level domains.
For instance: I haven't been to the front page of YouTube in years; there's no reason to go there. When I would type "www.y" into the location bar, it would pop up to the one video I visited most often - and that's exactly what I WANTED it to do. Now it defaults to "YouTube.com" and I have to scroll down to find the actual page I want. Same deal with Wikipedia: I don't want to go to the front page, I want to go to the page I use most often for research.
So basically, what do I need to change to get the location bar autocomplete to stop giving me top-level domains I don't want, and go back to giving me the subpages I spent years training it to favor? Scrolling down to the right entry is a waste of time when typing one letter and hitting enter should be enough to do it...

And I meant the actual location bar, not the dropdown menu below it. The dropdown is fine: it's the autocomplete '''in''' the location bar that needs to be fixed...

How to block top-level domain names in rules for EOP?

Using EOP for email filtering to/from our on-premise Exchange server. How do I block entire top-level domains in the rules section under mail flow? For example, w need everything ending with .link blocked. Right now I
have only been able to block email addresses and full domain names. I know I can setup a transport rule in our exchange, but I'd prefer EOP handle this before like it should. Thanks in advance.

If you're using EOP and your goal is to block stuff coming from a certain geographic area then you need to go to your exchange admin center select Protection>content filter>Default Policy>International Spam>Filter email messages sent from the
following countries or regions

Naming your top level domain

I am setting up a new directory server for our organization, we'll call it direct.org.
I would like to know how you determine which way to name your top level domain.
o=direct
o=direct.org
dc=direct,dc=org
Most of the organizations around us use the "o=xxxx.org" or "o=xxxx.edu" so I set up our test server as o=direct.org. Before I put this thing into production I wanted to find out what factors are used to determine how you define the top level domain.
We are, in a sense, an ISP. However, our only clients are educational institutions.
I took Sun's Directory Server class last year and I asked this question in class. It seems that nobody could come up with a clear answer to this question.

For LDAP V2 - use o=direct.org
for LDAP V3 - use dc=direct,dc=org

Realms with different top-level domain

I'm testing OCS 10.1.2 and I am interested in setting up multiple realms.
Must all realms be in the same top-level domain? I see in the examples (like in Note Note:317434.1) names like this:
- Default realm created at install:
dc=us,dc=oracle,dc=com
- Additional realms created by the administrator post-install:
dc=uk,dc=oracle,dc=com
dc=ca,dc=oracle,dc=com
A more typical example for what we need would be:
dc=company,dc=co,dc=uk
dc=company,dc=no
dc=company,dc=de
Is this possible?

What are the consequence of that? Any practical problems?
I see in Note 308682.1 that the top level of a top level domain is NULL. So maybe instead of world you can use an empty top level domain.
However, this document refers to mail and not OID.

Email address with new top level domain (TLD)

Hi all,
Apple does not recognise the new top level domains. My company has a new domain e.g. aaa.systems and os x says that the email [email protected] is not valid!
Please help.

This will work partly. But the mail address will still be [email protected] and gives an issue with the outgoing mail server.

Service interruption when adding cluster top level domain in CUCM 9.1.2?

I need to add a top level domain in CUCM 9.1.2. Will this result in any downtime or endpoint resets?

Hi,
No, it is not service impacting. It does not require any reset of devices or services.
HTH
Manish

Multiple Top-Level Realms in Access Manager via AMconfig?

Is it possible to configure multiple top-level realms in Access Manager via AMconfig? It is not possible through the UI.

Hi!
How about this:
String adminDN = (String)AccessController.doPrivileged(new AdminDNAction());
String adminPwd = (String)AccessController.doPrivileged(new AdminPasswordAction());
adminToken = adminManager.createSSOToken(new AuthPrincipal(adminDN), adminPwd);
hth Chris

How to connect top level domain database to subdomains

Created subdomains for the top level domains. Need to learn
how can we connect centralized database in the top level domain
with the subdomains code in coldfusion.

If you're using EOP and your goal is to block stuff coming from a certain geographic area then you need to go to your exchange admin center select Protection>content filter>Default Policy>International Spam>Filter email messages sent from the
following countries or regions

Block Top Level Domain (.eu)

I'm trying to configure a transport rule in Exchange 2013 to block all emails from the TLD .eu We get nothing but a TON of spam that is not caught by the Exchange 2013 spam filter, and it's always from a different domain. I have seen guides for
2007 and 2010, but nothing for 2013.
Do I just use the rule "The sender domain is" and use the value ".eu"? I just want to verify this is the correct way to block a TLD.

Hi Jsilveri,
You can use Sender Filtering feature:
Set-SenderFilterConfig –BlockedDomains
http://technet.microsoft.com/en-us/library/bb124087(v=exchg.150).aspx
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support
That is the same answer as before. The domain changes with each spam message. I need to block anything coming from a .EU top level domain. So domain1.eu , domain2.eu should all be blocked with 1 rule.

IMessage and new Top level domains

My new email address has a new top-level domain (.kiwi instead of .nz) - I am trying to get iMessage to allow the use of that address, but the verification email never arrives. Anyone know a way to convince Apple that my new email address is legitimate and can be used for iMessage and FaceTime?

Hello The-Organist,
After reviewing your post, I have located an article that can help in this situation. It contains a number of troubleshooting steps and helpful advice concerning Apple ID issues:
Frequently asked questions about Apple ID
http://support.apple.com/kb/ht5622
How do I verify my Apple ID by email?
Simply follow the link in the verification email that says "Verify Now." Sign in with your current Apple ID and password, then click Verify Address. You can also verify by signing in at My Apple ID. You'll receive an email prompting you to verify.
Thank you for contributing to Apple Support Communities.
Cheers,
BobbyD

Multiple top level package declarations

The "Programming Adobe ActionScript 3.0" states in chapter 4 "ActionScript Language and Syntax", "Packages and Namespaces", "Creating Packages" that you can declare at the top level of a package multiple variables, functions, and namespaces in addition to a single class as long as only one is declared "public".
However, in Flash when I declare a public class and any other variable or function either with the "internal" attribute or no attribute, I get this error:
5006: An ActionScript file can not have more than one externally visible definition: test.function1, test.Test
The package code is as follows:
package test
    internal function function1():String
        return "Function1()";
    public class Test
The same thing happens if I replace the function with an internal variable declaration. According to the manual, any declaration with the "internal" attribute should not be externally visible outside the package. Only the "public" class declaration should be externally visible.
Can anyone clue me in as to why I get this error?

That is not the situation described by the quoted manual section that I am trying to recreate.
It clearly says:
"In ActionScript 3.0, you use the package statement to declare a package, which means that you can also declare variables, functions, and namespaces at the top level of a package. You can even include executable statements at the top level of a package. If you do declare variables, functions, or namespaces at the top level of a package, the only attributes available at that level are public and internal, and only one package-level declaration per file can use the public attribute, whether that declaration is a class, variable, function, or namespace."
The data properties and class you have decleared are outside the package within the ActionScript file, and not at the top level of a package. The "public" attribute is not available outside the package at all.
What I wish to know is why the quoted internal declarations at the top level of the package generate the quoted error.
However, I am beginning to believe that the documentation is in error and that what it is actually describing IS the situation you just described. When the manual says "top level of the package", it really means "top level of the ActionScript file outside the package", and when it says "the only attributes available at that level are public and internal", it really mans "the only attribute available outside the package declaration is internal. At the top level of the package, only one declaration may be made, it must have the same identifier as the ActionScript file name, and it can have either the public or internal attribute. Code within the same file but outside the package declaration can not access an internal declaration in the package declaration."
Actually, the whole paragraph would need to be re-written to clarify the issue and to unambiguously distinguish between "top level of a package" and "top level of an ActionScript file outside the package declaration".
As a concrete example - two ActionScript files:
MCTest.as is saved in the same directory as MCTest.fla, and the document class of MCTest.fla is set to "MCTest".
package
    trace("MCTest package code.");
    import flash.display.MovieClip;
    import test.Test;
    public class MCTest
    extends MovieClip
        trace("MCTest class code.");
        function MCTest()
            trace("Created Class MCTest: " + Test.StaticMessage);
trace("MCTest outside package code");
Test.as is saved in a sub-directory called "test".
package test
    trace("test.Test package code");
    public class Test
        public static const StaticMessage:String = "Test: Hello World!";
        trace("test.Test class code");
var myField:String = "myField";
function myFunction():String
    return "myFunction";
trace("test.Test outside package: " + myField + ", " + myFunction() + ", " + test.Test.StaticMessage);
The resultant trace output is:
MCTest class code.
MCTest package code.
MCTest outside package code
test.Test class code
test.Test package code
test.Test outside package: myField, myFunction, Test: Hello World!
Created Class MCTest: Test: Hello World!
It is interesting to note that the package and outside package code are executed AFTER the class code.
That seems to make more sense. You can only declare one class, variable, function, or namespace at the top level of a package with the same identifier as the file name, public or internal, and you can include executable code. At the top level of the ActionScript file outside the package declaration, you can only declare internal classes, variables, functions, and namespaces, and you can include executable code, none of which are within the package nor have access to any package internal declarations.
The problem, therefore, would seem to be an incorrect manual. Does anyone actually know if this is accurate and the intended behavior?

How to avoid multiple top level navigation nodes ?

Dear portal experts,
If a user is assigned to multiple portal roles, which contain partially the same worksets, the user gets these worksets doubled in the top level navigation.
Can this be avoided ? The portal should check the user roles and show each workset only once.
Thanks,
Johannes

Hi,
you have to set Merge ID attribute to the worksets.
Regards,
Ladislav

SetCursor use for multiple top level windows (JFrame)

Hello,
I have an application with many top level windows, most of which are running under a single
thread. I'm trying to implement a class to toggle the cursor (normal<->busy) for any window
that is present in the application.
I can't seem to get the cursor to change for any window other than the main window. I'm providing
below the class that's used to register the windows and set the cursors.
What am I missing?
import java.awt.Cursor;
import java.util.ArrayList;
import javax.swing.JComponent;
import javax.swing.RootPaneContainer;
public class AppWindows {
    ArrayList<WinInfo> windows;
    /** Creates a new instance of AppWindows */
    public AppWindows() {
        windows = new ArrayList<WinInfo>();
    public void add(JComponent window, String title) {
        WinInfo win = new WinInfo(window, title);
        windows.add(win);
    public void delete(JComponent window) {
        windows.remove(window);
    public void deleteAll() {
        windows.clear();
    public void setBusyStatus(boolean busy) {
        for(int i=0; i<windows.size(); i++) {
            JComponent j = windows.get(i).getWindow();
            RootPaneContainer root = (RootPaneContainer)j.getTopLevelAncestor();
            if(busy == true) {
                root.getGlassPane().setCursor(Cursor.getPredefinedCursor(Cursor.WAIT_CURSOR));
                root.getGlassPane().setVisible(true);
            else {
                root.getGlassPane().setCursor(Cursor.getDefaultCursor());
                root.getGlassPane().setVisible(false);
class WinInfo {
    private JComponent win;
    private String title;
    public WinInfo(JComponent win, String title) {
        this.win = win;
        this.title = title;
    public JComponent getWindow() {
        return win;
}Bill

I would very much like to know how to avoid this also!!!

ADFS server pointing to multiple top level domains

Similar Messages

Maybe you are looking for