Forum Discussion
Lucas_Thompson_
Historic F5 Account
This is more of a Microsoft AD structure question that you should address to a Microsoft trained network architect, or Microsoft.
APM can authenticate using RADIUS, Kerberos (AD), LDAP, or HTTP (among others). So if you can expose any of those interfaces toward APM by using some DC-DC trust relationship setup, it will work.
Lucas_Thompson_
Apr 27, 2016Historic F5 Account
Absolutely correct. APM does not pay attention to these factors. There is an existing enhancement request for APM's authentication-DNS client to pay attention to "Sites and Services" information for geo-weighting and similar use cases. It's F5 RFE 495587. Few customers have expressed interest in this feature though, but feel free to open a support ticket or speak with your sales rep.
Here's a Microsoft article that describes it:
https://technet.microsoft.com/en-us/library/cc754697.aspx