Support for AD groups over multiple domains

回答済み

Davide Cerri

2018年04月17日 09:36

It looks like AD groups defined in one domain but having members belonging to different domains are not supported by the AD sync tool (confirmed by support).

So, if the AD group DomainA\GroupX contains the users DomainA\User1 and DomainB\User2, in the KnowBe4 platform only User1 is a member of GroupX (User2 is correctly imported but is not a member of the group).

It would be good to support such situation in the AD sync tool.

1

• 

  Natalie Koly 2018年04月17日 14:40

  Hi Davide,

  Thank you for your feature request! I confirmed with our Support Tech, Chris, that ADI does not support cross-domain enumeration. I also saw that you are unable to manually create these groups within the console due to your user count, making this request completely valid. I went ahead and submitted it to our development team for review. We base a lot of our new releases and features on customer ideas and requests, so we do appreciate your input.
  
  Thanks!

  Natalie
  KnowBe4

  0

  コメントアクション Permalink
• 

  Jim Strowe 2018年05月24日 17:16

  Decidedly interesting.  We also have more than one domain and users across both.  At this point that locks out AD integration making use and updates more work each month.

  0

  コメントアクション Permalink
• 

  Natalie Koly 2018年05月24日 20:38

  Hi James,

  Thank you for you input! I went ahead and submitted an additional feature request for this to our development team for their review. We base a lot of our new releases and features on customer ideas and requests, so we do appreciate your feedback!

   

  Thanks!

   

  Natalie
  KnowBe4

  0

  コメントアクション Permalink

サインインしてコメントを残してください。