Integrating an AD that is organized in hierarchy

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello everyone,
I’m trying to integrating an AD that has a hierarchical structure.
For example I have the root AD and two childrenAD from the root one. For example I have the AD A as root and two different children of the same level B and C.
The problem in my scenario is that an identity in the AD B may has the manager in the AD C, but how I can manage this kind of “cross-AD” scenario? I have to integrate each one AD as different one or I can Integrate only the root AD A. In the last case, how I can manage the different entlitements that childrens AD may have?
Thanks

2

Hi @s_tartaglione An AD forest with multiple domains is completely supported by ISC, see Forest Settings and Domain Settings

Don’t worry about “hierarchy” that’s just a directory services construct. Also, don’t worry about manager attribute, that has a DN syntax and Global Catalogs include all forest objects for indexing purposes.

3

Ok, but how to handle the entlitements of each different AD? for example in my case how I can differentiate an entlitement of the children B and an entlitement of children C? How I can handle two entlitlement of different children in my hierarchy but with the same name? Thanks

4

Hi Salvatore. Bear in mind the Groups will have unique identifiers - DN and sAMAccountName (and GUID), for instance. Without knowing your naming convention, the best thing is to Sandbox it. If you don’t have a representative test environment, acquire a Service Account with read only access and “test and learn”.