https://answers.axonivy.com/questions/583/how-to-read-and-synchronize-users-from-multiple-active-directory-domains<p>We have 3 different AD domains and should have the users of all of them in our ivy5 application</p>enFri, 18 May 2018 04:17:28 -0400https://answers.axonivy.com/questions/583/how-to-read-and-synchronize-users-from-multiple-active-directory-domains/3280<p>It works if you synchronize the users with your own logic.</p> <ul> <li>Create an application that uses the <code>Ivy Security System</code> instead of the official 'Microsoft Active Directory.</li> <li>Set-up a simple process that runs every night (e.g. with a Timed Start Event). Within this process you can modify valid Axon.ivy Users and Roles by using official API. <code>ivy.session.getSecurityContext().createXYZ</code>.</li> <li>To get users of the different Active Directory Systems you can use the <a href="https://github.com/ivy-supplements/bpm-beans/tree/master/ldap-beans">Ldap-Beans</a> which give you a simple interface and spits out matching users of the LDAP accoring to your queries.</li> <li>To verify that the synchronized users are really allowed to use your system I'd use an IIS front-end server that handles the authentication. (and IIS can easily handle complex AD-Forests)</li> </ul> <p><img alt="alt text" src="https://answers.axonivy.com/upfiles/adminUi_securitySystemSelection.png"></p>Reguel WermelingerFri, 18 May 2018 04:17:28 -0400https://answers.axonivy.com/questions/583/how-to-read-and-synchronize-users-from-multiple-active-directory-domains/3280