Bookmark this page

Summary

  • A resilient architecture includes several components, such as replicas, suffixes, and topology segments.

  • IdM uses a multisupplier architecture to allow replicas to update data using replication agreements.

  • IdM creates a topology segment when a replication agreement defines a suffix to synchronize data between replicas.

  • IdM supports two topology suffixes: Domain (with identity-related data) and CA (with certificate authority data).

  • The assigned role of a replica determines the services that it hosts, such as DNS server, Key Recovery Authority (KRA) server, Active Directory trust agent, or trust controller.

  • You can manage a replica's hosted services by assigning the correct role.

  • Removing a replica from the topology is an irreversible action; ensure that the roles assigned to the replica map to other servers.

Revision: rh362-9.1-4c6fdb8