Authentication - multiple domains with multiple accounts

Dear All,
Consider an environment where a user, Joe Bloggs, has an account on two Windows domains: DOMA and DOMB. DOMA is a domain that all users in the organisation are members of. DOMB is a domain used by a smaller subset of users. The user's
machine is part of the DOMB domain.
I'd like to deploy SharePoint 2013 on DOMA and have the user, logged on to their DOMB machine, seamlessly authenticate (through IWA) with SharePoint 2013.
So far, I've thought of the following solutions:
1. Build a trust between the two domains. Possible, but the AD information in DOMA is more up-to-date than that in DOMB and I'd like to use that to populate SharePoint user profiles. Also, DOMB is likely to be deprecated in the future.
2. Use WorkPlace Join. Unfortunately, devices are running Windows 7 and WorkPlace Join only works for devices running Windows 8.
I've wondered whether it's possible to map two accounts on separate domains together so that a user on DOMB can effectively masquerade as their corresponding user on DOMA when authenticating with SharePoint, but haven't come across a way of doing this, yet.
Any ideas? Or, am I completely mad?!
Thanks in advance.

1) Is your only option for seamless logon with IWA. It is not possible to map accounts "together" so-to-speak. SharePoint stores a reference to the user's SID, which must match the user making the request.
An ADFS trust might be another option, although that increases your deployment footprint and complexity.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

Multiple Macs with multiple user accounts

I have a Mac computer connected to airport and use Time Machine for backups. This works well.
I have now purchased a second Mac and would like to include this second Mac so that I can move between Macs and work. There does not appear to be any mechanism to allow this.

After searching the web and the discussion here, here's my minimal impact solution for multiple Macs with multiple users in a household:
1) Set up Mac1 for myself only
2) Set up Mac2 for the wife and kid
3) Set up each Mac to backup to the Airport base station using Time Machine (this would create two separate backups on the Airport base station's drive, which from what I've read has its own problems)
4) On Mac1 setup "empty user accounts" for the wife and kid. These will not have any files in them - just an access mechanism. If they want to access their files, they can use Time Machine's "The Browse Other Backup Disks Option" to get their file from Mac2, work on it and then drop it in the Shared Folder. Next time they are on Mac2, remember to copy the updated/created file from the Shared Folder into their Mac2 user account. If possible, get Time Machine to not backup the "empty user accounts".
5) Do the same for me on Mac2.
Not the most elegant solution, but until Apple get off their backside and make this seamless, I can't think of anything else :-( .
P.S. iCloud is not a soluton since it costs hundreds of dollars a year, uses up intenet data allowance and is slow.

Multiple Quizzes with multiple results (in Captivate 6)

Hey guys, Thanks for reading!
Does anyone know if it is possible to do multiple tests with multiple results in captivate 6? or if it is possible to have a pre-test with a quiz, and have separate results for each?
I've been having a play with captivate 6 and when I put a quiz in, it overrides the results slide for my pre-test.
Looking at the results slide master properties I can choose to have results for one of my quizzes but not both (even on separate slides):
It wont even let me insert another slide based on the other result.
I would like to know if multiple quizzes with multiple results is possible in Captivate 6?, or if I am simply doing something wrong?
Thanks!

Sorry for way-late reply...
It's really more how your LMS handles 'courses' and the terminology it uses.
Essentially, most often, a 'SCORM Package' (SCO) is a 'course'. I'd rather call each SCO a 'lesson' as, to me, 'courses' should be setup in the LMS with a series of 'Lessons'.
Regardless of the terminology, each 'SCO' is launched by the LMS and one score can be recorded for it via SCORM.
So if you need multiple final scores recorded, each of those final scores need to be in their own SCO.
A common approach is a Pre-Test SCO (or 'lesson', or 'course', whatever term), a 'Content' SCO perhaps with some interspersed scored interactions, and a Post-Test SCO...all three merged together as a 'course' (or whatever term) within the LMS.
That said, as said, it really all depends on how your LMS handles various SCOs...
Clear as mud?
E

IWeb 09 Multiple sites with multiple MobileMe accounts

Hi guys, one more for you,
i have my MobileMe account and my website, i also create to more small sites just for testing purpose, i want to know if i can have multiple websites on iWeb and each one with their own MobileMe account.
(e.g)
-- site1 ( [email protected])
-- site2 ( [email protected])
-- site3 ( [email protected])
i have only One Mac computer and i have to work on 3 different sites with only this computer.
Help please... I am new to Mac world ( but i love it )

Do you really have 3 separate users or just want to publish 3 separate sites? If it's the latter then you can do all of them with just one MMe account. In your domain file with three sites the top size will be the "alpha" site in that if you enter the minimum URL, http://web.me.com/YourMMe_AccountName/, the top site will come up. To go to the other two sites you'll need to add the site name on the end of the URL above, i.e. http://web.me.com/YourMMe_Account_Name/Site_1name/.
In this economy if you can do what you want with one account that's saving some $$$$.
OT

Multiple Mail Domains with multiple IP addresses

Hello,
I am attempting to configure a mail server with 3 domains and 3 distinct IP addresses. I am currently only working with 2 of the domains.
Mail sent to either domain is received by the accounts in both domains: if I send a message to [email protected], it goes to both that mailbox and the [email protected] mailbox. I have user accounts set up in WGM for both domains.
I'm sure I have something misconfigured, but the only instructions I can find for multiple domains assume virtual domains using only one IP address.
postconf -n
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
html_directory = no
inet_interfaces = all
localrecipientmaps = proxy:unix:passwd.byname $alias_maps
luser_relay =
mail_owner = postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mapsrbldomains =
mydestination = $myhostname,localhost.$mydomain,localhost,mail.tomsheehan.com,tomsheehan.com,ma il.19north.com,19north.com
mydomain = tomsheehan.com
mydomain_fallback = localhost
myhostname = mail.tomsheehan.com
mynetworks = 127.0.0.1/32,66.216.189.129/32,66.216.189.133/32,66.216.189.134/32,tomsheehan.c om
mynetworks_style = host
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpdclientrestrictions = permit_mynetworks rejectrblclient zen.spamhaus.org permit
smtpdpw_server_securityoptions = login
smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
smtpdsasl_authenable = yes
smtpdtls_keyfile =
smtpduse_pwserver = yes
unknownlocal_recipient_rejectcode = 550
virtualmailboxdomains =
virtual_transport = virtual
Thanks in advance for any help I may receive!
Scott
iMac Core2Duo 2 GHz, iMac G4 700, iMac G4 800, iBook G3 900 Mac OS X (10.4.9)

Scott,
can you elaborate a bit on the final goal?
There is no need to use multiple IPs to run seperate domains. Virtual domains can handle this just fine.
You could run three different instances of postfix bound to different IPs and different configurations. (postfix -c configdir_touse start) Each config directory would have its own main.cf with the main parameters to be changed being "inet_interfaces", "myhostname" and "mydomains". However, unless you have a very specific need this is just an extra headache.
Alex

Sending mail through multiple domains with iMS

I have iMS configured and working fine for multiple domains (users are
members of multiple domains). I have done this with a main email address
(main.com), and alternative email addresses to the other domains (alt1.com,
alt2.com...) so that there is one central mail location at (main.com). This
works great for receiving emails.
However, when I send email I would like to be able to show the FROM address
being from one of the alternate domains (alt1.com, alt2.com...) rather than
the main domain (main.com) sometimes. I have authentication turned on for
the sending messages, and users are logging in as ([email protected]). I assume
there is something I can add that will allow this to happen as long as a
valid address exists on my server. Any thoughts?
main domain: main.com (All mail is addressed from this domain)
alt domains: alt1.com, alt2.com...
Thanks in advance, Chris

BTW I am using iMS 5.1.
-Chris
I have iMS configured and working fine for multiple domains (users are
members of multiple domains). I have done this with a main email address
(main.com), and alternative email addresses to the other domains(alt1.com,
alt2.com...) so that there is one central mail location at (main.com).This
works great for receiving emails.
However, when I send email I would like to be able to show the FROMaddress
being from one of the alternate domains (alt1.com, alt2.com...) ratherthan
the main domain (main.com) sometimes. I have authentication turned on for
the sending messages, and users are logging in as ([email protected]). I
assume
there is something I can add that will allow this to happen as long as a
valid address exists on my server. Any thoughts?
main domain: main.com (All mail is addressed from this domain)
alt domains: alt1.com, alt2.com...
Thanks in advance, Chris

Would like assistance with multiple devices with multiple iTunes accounts syncing on one PC

I have had an iPhone for some years now and have been syncing with my PC without issue (first with iPhone 3gs and now with iPhone 4s). My wife bought me an iPad 3 retina in December 2012 which syncs with the same PC as my phone and shares the same iTunes account. Apps downloaded onto one device are automatically downloaded to the other, iMessages are sent and received to both devices also.
My Wife now has an iPad mini with retina (using her own existing iTunes account which she previously used for an iPhone she no longer uses). I synchronised her new iPad mini with my PC assuming iTunes would manage the device and related account and contents separately to my existing account and 2 devices. However this has caused an issue with the sharing of apps. Since doing so I have started seeing updates available on my devices for apps which I have never downloaded, but my wife has. If I tell my iPad to update said apps, I am asked for my Wife's iTunes account password.
On doing some searching via google I now understand that I should have created a second windows profile on my PC for my wife and installed iTunes onto this profile for the purposes of syncing her device.
I would very much like to do this, but would like some assistance on the best course of action for doing so. If I proceed and created a second profile and sync her device to this, I presume I would need to tell iTunes to treat her iPad as a new device (and wonder what would happen to her existing content)? Assuming we do this, I presume the issue of my seeing her app updates would still persist?
Could someone advise if they have any experience with similar issues/queries?

How to use multiple iPods, iPads, or iPhones with one computer
http://support.apple.com/kb/HT1495
How to Share a Family iPad
http://www.macworld.com/article/1163347/how_to_share_a_family_ipad.html
Using iPhone, iPad, or iPod with multiple computers
http://support.apple.com/kb/ht1202
iOS & iCloud Tips: Sharing an Apple ID With Your Family
http://www.macstories.net/stories/ios-5-icloud-tips-sharing-an-apple-id-with-you r-family/
How To Best Use and Share Apple IDs across iPhones, iPads and iPods
http://www.nerdsonsite.com/blog/2012/06/07/help-im-appleid-confused/
 Cheers, Tom

Windows Server - Run multiple domains under different accounts

Hi,
I have multiple domains on a Windows Server. I'd like to run these under separate accounts for security reasons.
My options I have so far:
1) Install all Admin servers and managed servers as windows services and set logon appropriately
2) If possible, use multiple node manager instances, one for each domain and set the log on for each node manager windows service
I like the idea of multiple node managers but I can't find any reference in the documentation about this. I'd rather not use option 1 as I won't be able to restart servers from the WebLogic Console
Has anyone had to do this before?

First option might be the cleanest .
For second option make sure that there are separate Node_Manager home directory for different node manager instances.
Edited by: atheek1 on Jun 19, 2010 4:55 AM

Migrating multiple domains with same name - how? Rename? Migrate through temporary domain?

Hi,
we have acquired another company, and they have multiple, separate domains with the same name (every site has a domain with NetBIOS name "COMPANY" and DNS name "company.local"). Now we want to migrate all these domains into ours using
ADMT.
Unfortunately, we did not manage to migrate one of these domains completely, so the trust must remain established for some time. But we have to continue with the second domain - which normally would require a trust, but of course we can't establish a trust
to two domains with the same name at the same time.
I found two potential solutions for the dilemma, but I'm not sure if both are reasonable:
1) Rename the domain with RENDOM.EXE to COMPANY2 and company2.local and then migrate with ADMT
2) Migrate COMPANY to a temporary domain such as COMPANYTEMP and then migrate from COMPANYTEMP to our domain
Given that there are roughly 100 users, 2 domain controllers and 8 other servers, what would be the better approach? Is option 2 possible at all, so would I be able to use the sidHistory attribute migrated from the original COMPANY domain in our domain at
all?
There is also an Exchange 2007 server, which seems to make option 1 impossible unless we find another way to migrate it (like, export all mailboxes to PST before migration) ...

Ok, that's what I expected. Still, I have servers in the old domain, so if I do these steps:
first create a new temporary domain i.e COMPANYTEMP and
create trust between COMPANYTEMP -
COMPANY(Right)
then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
disconnect the domain COMPANY(right) ,
users will lose connectivity to any servers in the domain. I understand that it does not work with all domains connected? Of course I can't make OURCOMPANY's domain controllers see the DCs of COMPANY (right) in DNS (though I could achieve it the other way
round).
My original plan was:
first create a new temporary domain i.e COMPANYTEMP and
create trust between COMPANYTEMP -
COMPANY(Right)
then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
create trust between OURDOMAIN and COMPANYTEMP
then do the migration with sidHistory from
COMPANYTEMP --> OURDOMAIN,
Migrate users
Migrate computers
Migrate servers
remove trusts and old domain
But I see that this will not work out, right? So, my only option would be:
first create a new temporary domain i.e COMPANYTEMP and
create trust between COMPANYTEMP -
COMPANY(Right)
then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
Migrate computers and servers to COMPANYTEMP
Install new Exchange server in COMPANYTEMP
migrate mailboxes to COMPANYTEMP
disconnect / abandon COMPANY(right)
create trust between OURDOMAIN and COMPANYTEMP
then do the migration with sidHistory from COMPANYTEMP
--> OURDOMAIN,
Migrate users
Migrate computers
Migrate servers
Migrate mailboxes
remove trusts and old domain
And to minimize user impact, all this would have to be done in one go (over night), which is hardly possible .........................

Define Multiple Taxes with different Accounts

Dear Members
I have defined tax in Oracle R12 . and defined multiple rates. these all tax deducted in a single Tax account. but my requirement is, there should be multiple taxes with different acccounts. when I define multiple taxes the system gives error unable to Calculate the tax. when I only enable one tax it works.
Current sanario tax rates
2% Account # 666461
3% Account # 666461
3.5% Account # 666461
Required Sanario
2% Account # 666461
3% Account # 666462
3.5% Account # 666463
Should be different
Do you have any Idea How I configure it.

Hmmm, thought I did that but ran into issues...Will give it a harder look.
Thank you for your reply, tt2...BTW, I've been reading these forums for awhile now and your replies in other posts have helped me so thanks for all of them, too...

Multiple Domains with oc4j-ra.xml

Hi, I am using the oc4j-ra.xml file in the /oracle/app/10Gias/j2ee/OC4J_BPEL/application-deployments/default/DbAdapter/ directory to my database connection. I have now created a second domain for a TEST environment and want to use a seperate oc4j-ra.xml file for it. Is this possible? Should'nt there be a seperate oc4j-ra.xml file for each domain? Or is there another way to handle this with multiple domains?
Thanks

Hi,
I am sorry it is not oc4j-ra.xml rather it is OraHome_1\j2ee\OC4J_BPEL\config\data-sources.xml where we have jndi location of all datasources.
i think here we can define multiple datasource elements pointing to diffrent databases say one for Development and one for Testing like:
for Development:
<data-source class="com.evermind.sql.DriverManagerDataSource"
     name="BPELServerDataSource"
     location="jdbc/BPELServerDataSourceWorkflowDev"
     xa-location="BPELServerDataSource"
     ejb-location="jdbc/BPELServerDataSource"
     connection-driver="oracle.jdbc.OracleDriver"
     max-connections="50"
     min-connections="10"
     connection-retry-interval="30"
     max-connect-attempts="10"
     username="orabpel"
     password="->pwForOrabpel"
     url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=101.11.50.51)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=esb)))"/>
for Testing:
<data-source class="com.evermind.sql.DriverManagerDataSource"
     name="BPELServerDataSource"
     location="jdbc/BPELServerDataSourceWorkflowTest"
     xa-location="BPELServerDataSource"
     ejb-location="jdbc/BPELServerDataSource"
     connection-driver="oracle.jdbc.OracleDriver"
     max-connections="50"
     min-connections="10"
     connection-retry-interval="30"
     max-connect-attempts="10"
     username="orabpel"
     password="->pwForOrabpel"
     url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=101.11.50.52)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=esb)))"/>
after that, modify the domain.xml in Development domain to point
<property id="datasourceJndi">
<name>Domain datasource JNDI</name>
<value>jdbc/BPELServerDataSourceWorkflowDev</value>
<comment><![CDATA[
The JNDI name for the domain datasource. This datasource may refer to any datasource (JTA not required).
]]></comment>
</property>
and modify the domain.xml in Testing domain to point
<property id="datasourceJndi">
<name>Domain datasource JNDI</name>
<value>jdbc/BPELServerDataSourceWorkflowTest</value>
<comment><![CDATA[
The JNDI name for the domain datasource. This datasource may refer to any datasource (JTA not required).
]]></comment>
</property>
I hope this will help you.
Thanks,
-Vidya

Multiple Sites, Multiple Domains, one .mac account?

So, is this possible? Can you create multiple sites in iWeb, save them to a .mac account, and then purchase domain names for each of those sites and have one assigned to each? I'm assuming no, but I'm seeing if someone knows how or someone has some workaround to keep it on .mac, but have multiple domain names for my sites?
Thanks!!

So, is this possible?
No.
Can you create multiple sites in iWeb, save them to a .mac account, and then purchase domain names for each of those sites and have one assigned to each?
Yes and no. While .Mac does offer Domain name hosting in the form of a CNAME alias, only one Domain name is available per .Mac account. .Mac is not a registrar for multiple Domains. You can host multiple sites on your .Mac account, but if you desire a 'Domain name' for each site, you will need to purchase the Domains from a registrar like Yahoo, GoDaddy, 1&1, etc, and then forward these Domains to the appropriate sites, hosted on your .Mac account.
I'm assuming no, but I'm seeing if someone knows how or someone has some workaround to keep it on .mac, but have multiple domain names for my sites?
The "workaround" would be to utilize Domain forwarding from a Domain name registrar, using the .Mac urls for the forwarding address(es).
-Mark

Can multiple iphones with multiple itunes accounts be synced to one mac keeping apps seperate over the air?

We have about 20 iPhone's in our environment and syncing and updating them has become a real chore lately. Everyone has their own iTunes account and apps that they use. Is there a way that they can be synced, backed up and updated over the air (not iCloud) to the same MAC? Because we are in the financial sector we will not be able to use iCloud. Should we look into some sort of private cloud and if so; any suggestions on how to accomplish it would be greatly appreciated.
Thank you in advance,
J

We have several macs, several ipods, a couple of iphones, several itunes store accounts. So far no problem. You might have to share passwords if you want to share content. I think iStore accounts can only be used on up to 5 computers. We have 7, so have to be a little careful about that. I don't think there is a limit on how many iDevices can be used with one account. I also don't think there is a limit on how many accounts can be used on a single computer (might be wrong about that). You have to be logged into the iStore to download content, and your computer has to be registered with the account to use the content, but once it is on, and registered, syncing to an iPod is not a problem (you do not have to login in again for each account the content was purchased from). I'm just glad I only have two kids, and one wife - things could get trickier in a big family with . . .

One library with multiple devices with different accounts?

Here is the setup:
*(1) Windows XP PC with iTunes and (1) Library
*(1) iPhone and (1) iPad with iTunes Account A
*(1) iPad with iTunes Account B
*(1) iTouch with iTunes Account C
Is it possible to have one iTunes Library where we can all have our music (all we use really - no videos, etc) and can drag and drop among the different devices as we please? If so, how can this be done? If it cannot be done, what is the next best thing and how do you do it?
(All devices are sync'd manually - we just drag / drop.)
MANY thanks for your assistance.
DJP

Hmmm, thought I did that but ran into issues...Will give it a harder look.
Thank you for your reply, tt2...BTW, I've been reading these forums for awhile now and your replies in other posts have helped me so thanks for all of them, too...

Multiple Domain files, Multiple Sites, Publishing Problems

I am frustrated beyond belief. I'm an old hand-coder, coming from BBEdit, but I've been using iWeb almost exclusively since its release, because it really is a great product for quick, easy, stylish designs.
However.... In that year, my collection of sites has grown to 12. Discovering that iWeb becomes a major dog when dealing with that much material, I found and followed the instructions - today - to separate my sites into individual domain files, and edit them individually. iWeb is much snappier and publishing goes much more quickly.
The problem? Well... after editing, "Publish to .Mac" rarely works. Only "Publish All to .Mac" will get the site online (something about an error with the index.html file). But "Publish All to .Mac", I've just discovered, DELETES the other websites that I have previous published. All day I've been doing updates and publishing my sites, only to discover that the uploads have all been wiped out by the most recent one!
I'm a big enough fellow to admit that my knowledge isn't total nor perfect - so please, would someone out there with a better handle on iWeb than I (preferably someone who actually deals with multiple domain files rather than someone who thinks they can guess the problem) please clue me into how we make use of this program non-destructively?
I suppose I could always publish everything to folders and upload it to my iDisk (which itself remains ridiculously slow after how many years now? Sheesh!), but that detracts from the elegance of the .Mac integration, the counter features, - not to mention the little fact that I'm a paying .Mac customer and this darn thing should just work, no?

Mark:
I was where you were also. You should give iWebSites a try. It's to iWeb what iPhoto Library Manager is to iPhoto.
I use iWebSites to manage multiple sites.. It lets me create multiple sites and multiple domain files.
If you have multiple sites in one domain file here's the workflow I used to split them into individual site files with iWebSites. Be sure to make a backup copy of your Domain.sites files before starting the splitting process.
This lets me edit several sites and only republish the one I want. Just remember to put a copy of your current Domain.sites file somewhere else on your HD in case the splitting gets messed up. It went very smoothly for me and I now manage 19 or so sites.
Do you Twango?

Authentication - multiple domains with multiple accounts

Similar Messages

Maybe you are looking for