Bookmark this page

Summary

  • Active Directory uses forests and domain trees to logically organize domains. You can configure a trust to allow access to resources between their two previously unrelated AD forests.

  • You can configure one-way or two-way trust relationships between Active Directory and IdM. In the default one-way trust, IdM trusts Active Directory users who can access resources in the IdM domain.

  • A trust controller manages the trust relationship between IdM and AD. All other IdM servers that serve AD users are configured as trust agents.

  • ID views allow the remapping of foreign UIDs, GIDs, or other attributes in the IdM domain to avoid conflicts with user or group IDs. You can remap attributes globally or at a host level; a host-level attribute takes precedence over a global attribute.

  • You can modify the domain resolution to allow users to provide short names rather than their user principal name (UPN).

Revision: rh362-9.1-4c6fdb8