SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are trying to test the following setup. We have a SharePoint Farm in our forest (setup to use Kerberos). The DC of the SharePoint farm domain contains an AD with external users and their attributes. We have a second domain in this forest containing internal users. For our forest we have a sun LDAP server containing all the users and their credentials.

We would like to authorize our users entering from the internet through an UAG with the LDAP server configured as Authentication Server. After Authentication is established we need to map the users credentials with an AD account in one of the domains (Attribute in LDAP to tell to map to which account) (Single Sign On constraint Kerberos delegation)

The question is, where do we configure the mapping between the UAG authentication and or AD user?

Any help or thoughts are welcome!

share|improve this question

I believe your going to need to add ad fs to your plan.

This should get you pointed in the right direction.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.