cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Silver

LDAP Account Unit Configuration for an AD domain

When configuring an LDAP account unit for Identity Awareness that is tied to a specific AD domain, what is the best practice for number of domain controllers to add?  Do I need to add all my domain controllers?  Or can I just do a limited subset?

For example, if I have 4 Domain Controllers in my main data centers, and then another 10 that are distributed at remote sites, do I need to add all 14, or can I simply point at the 4 in my datacenters?

The IA setup is with a dedicated PDP cluster that will then share identities with GWs as needed.  The PDP cluster (located in the main datacenters) is connected to Identity Collector servers that are in the main datacenters.  These identity collector servers are connected to all the domain controllers to pull the identities from the DC event logs.

0 Kudos
1 Reply
Highlighted
Admin
Admin

Re: LDAP Account Unit Configuration for an AD domain

A subset with a proper PDP setup should be sufficient.
0 Kudos