Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Users from a different domain...

So... maybe I missed something. My company has just completed a merger and the domain that the SW main server is in and the domain where our new IDs reside are different. Do I need to use the SAML logging feature of is there something I need to do different to have SW look in a domain its not a pat of. Thanks.

Find more posts tagged with

Accepted answers

All comments

patrick.hubbard

That's a good question, and as with many things with domains and SAML trust, it depends somewhat on your environment. Let me find a link with more on how-to get that working.

patrick.hubbard

Ok, there are a couple of docs depending on your goal. If you're migrating the Orion server to the new domain, you can relocate the server and update the SSO SAML tokens for the new domain. (A "migration" install in a VM in the new domain is always a cleaner option in general). The Config Wizard should take care of the new machine's details in the existing DB for you.

If you're leaving the server as is for now, but extending authentication to users in the new domain, you can have multiple SAML SSO configs as well. Check out this doc and let me know if it's in the ballpark.

https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/core-users-saml-adfs.htm

Note: If you're using AD groups for access control, some updates may be needed in user configs (roles for groups) as the SIDs won't match between the domain providers. You should however, be able to run parallel access by adding the new domain AD roles to Orion, then retiring the existing domain users and role as user migrate.

cwjohnson3rd

Thanks, right now except for a few admin accounts that only I (the administrator) use all access is thru AD groups. The easiest thing for me would probably be to pawn it off on the AD team... I can add users from the other domain to the groups but there is some issue that is blocking access. With all the things going right now I am still trying to convince the higher ups to keep the product.