Multiple Active Directories

[Nate Klingenstein]

Ray and Myn,

I think the subtle difference between these two approaches is that JAAS could be used in a chaining approach (try A, then try B) and selects a first match, whereas this configuration will merge all DN's that match the pattern across directories.  I'd taken the question more literally(Try College A, and next College B, for successful bind?) but it may be that your directory structure allows for Ray's approach.  If it does, then I would use it.

Sure to be corrected again if wrong,
Nate.
 
-----Original message-----
> From: Ray Bon
> Sent: Tuesday, May 21 2019, 2:01 pm
> To: users at shibboleth.net
> Subject: Re: Multiple Active Directories
> 
> 
> 
> Myn,
> 
> Have a look at 
> https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-MultipleDirectories <https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-MultipleDirectories>
> 
> Ray
> 
> On Tue, 2019-05-21 at 12:46 -0700, Myn Harry wrote:
> 
> Our college is merging with another. It could be a few years before the Active Directories of the 2 colleges can be collapsed.
> 
> Is there a way in Shibboleth to bind against both Active Directories for authentications? Try College A, and next College B, for successful bind?
> 
> --
> 
> Ray Bon
> 
> Programmer Analyst
> 
> Development Services, University Systems
> 
> 2507218831 | CLE 019 | rbon at uvic.ca
> 
> --
> 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
>