IAS connect same application to multiple Active Directory - multiple authentication attempts

[#1]

Hi experts,

is it possibile to connect with IAS the same application to more than one AD? I mean, you login via application1 and the authentication is performed first in AD1 and if it fails it goes redirected to AD2.

Is it possibile to set it up?

Cristian

[D_Olderdissen]

Hi Christian,

nope, I am unaware of any option to handle this directly with IAS. This type of cascading the authentication downstream poses certain security and availability risks. Personally, I would not recommend it.

You could configure IAS as a proxy and point to an IDP that supports that type of setup. Again, I would recommend to stay away from it.

Cheers,
Dirk

[D_Olderdissen]

Hi Christian,

maybe check out the conditional authentication option? That would allow you to define a rule when to delegate the user authentication to what corporate IDP. Naturally that means the users should be routable based on a plain criteria - e.g. email domain.

Cheers,
Dirk

[digirolamocristian60]

Dear Dirk,

thank you for the answer, unfortunately routing is not what I'm looking for. I was thinking about a multiple attempt on different IdP if the first in the sequence fails.

Thank you though.