IQService agent for multiple domains

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello Community,

I have to integrate 4 AD Domains each one having a different Account Schema. The AD is unique and the domains are distributed as follows:

  • AD has 2 direct child domains FD1 and FD2
  • Father Domain FD1 has one Child Domain CD1
  • Father Domain FD2 has one Child Domain CD2

Each domain operates independently and maintains distinct account data.

I have been thinking about configuring 4 AD connectors in total and using the same IQService agent for all connectors.
Is this a correct approach?
Would it be necessary to deploy four individual IQService agents, one for each AD connector?

2

IQService agent supports multi-domain handling and can interface with each of the domains independently, this may work fine.

3

What about reachability, connectivity and throughput? Wouldn’t multiple agents be more recommended to better handle high data volumes or just spikes in data volume?

4

IQService will be running using some Service Account.

If you connect to all the domains using Same Service Account, then yes you can use same IQ Service.

If not, you need to configure multiple IQ Services in the same server.

– Krish