Is it possible to integrated RSA Archer with multiple Active directory ?
Is it possible to integrated RSA Archer with multiple Active directory?
1.7k views Asked by Radha At
1
There are 1 answers
Related Questions in INTEGRATION
- SuiteCRM how to retrieve all account related contacts
- how do i submit a pastebin or pastee from an android app and get the url back
- BigCommerce PHP API delete Category which contains products
- Interact with chrome bookmarks outside of extensions
- purchase individual items and subscriptions in the same PayPal REST API transaction
- youtube api v3 insert comments
- Youtube api v3 duration
- Responding to an Office 365 event invite via REST
- Convert youtube video to mp3 using Quick MP3 API
- How to real-time monitor the emails?
Related Questions in AZURE-ACTIVE-DIRECTORY
- SuiteCRM how to retrieve all account related contacts
- how do i submit a pastebin or pastee from an android app and get the url back
- BigCommerce PHP API delete Category which contains products
- Interact with chrome bookmarks outside of extensions
- purchase individual items and subscriptions in the same PayPal REST API transaction
- youtube api v3 insert comments
- Youtube api v3 duration
- Responding to an Office 365 event invite via REST
- Convert youtube video to mp3 using Quick MP3 API
- How to real-time monitor the emails?
Related Questions in ARCHER
- SuiteCRM how to retrieve all account related contacts
- how do i submit a pastebin or pastee from an android app and get the url back
- BigCommerce PHP API delete Category which contains products
- Interact with chrome bookmarks outside of extensions
- purchase individual items and subscriptions in the same PayPal REST API transaction
- youtube api v3 insert comments
- Youtube api v3 duration
- Responding to an Office 365 event invite via REST
- Convert youtube video to mp3 using Quick MP3 API
- How to real-time monitor the emails?
Related Questions in RSA-ARCHER-GRC
- SuiteCRM how to retrieve all account related contacts
- how do i submit a pastebin or pastee from an android app and get the url back
- BigCommerce PHP API delete Category which contains products
- Interact with chrome bookmarks outside of extensions
- purchase individual items and subscriptions in the same PayPal REST API transaction
- youtube api v3 insert comments
- Youtube api v3 duration
- Responding to an Office 365 event invite via REST
- Convert youtube video to mp3 using Quick MP3 API
- How to real-time monitor the emails?
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Popular Tags
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Everything is possible, it just a matter how much effort you are willing to apply :)
Option 1 (recommended): RSA Archer v5.x support multiple LDAP sync configurations. So you can have more than one AD server you can sync users against.
Side Effects:
[a] If AD1 and AD2 both have user with the same name, then you will have two users created in Archer in different domains. With manual login users will need to supply different domains.
[b] Not sure how it will work with SingleSignOn enabled. I think that SSO will work only for the primary domain, but I'm not sure - you may want to test this.
Option 2 (AD work around): I have little knowledge of Active Directory technology, but I believe that you can establish trust relationships between multiple AD's in a such a way that some group from AD2 can reside within another group in AD1 (and they will autosync as well). This way you can sync only against one AD with Archer, but have users from both AD's.
Option 3 (database back end work around): In the database you can find tables where the LDAP configuration, users, and users to groups mapping is stored. You can introduce a trigger that will make a copy of users table and usergroup tables after each LDAP sync. So after you run two LDAP syncs, you will have two back up copies. Then with your SQL trigger you can merge them and override the original table. With this approach you can sync users within same "archer domain" against multiple LDAP sources.
Side Effects:
[a] You have to write and maintain custom SQL code.
[b] Users can expect not to have proper access to the environment until all of your LDAP syncs are executed one by one and processed by the triggered code.
Good luck!