Hello,

Please, I have a problem and would like to know if the FIM help me solve.

We have two Active Directory forests in the same company and single physical site, however we are implementing a third-party application that only allows LDAP integration with only a forest and not work with trust relationship.

To solve this issue I thought about synchronizing accounts that are in the forest A who need to access the system in forest B and thus not having to create user repeated in forest B and thus maintain synchronized accounts. Would it be possible?

Basically, this system would LDAP queries in forest B, but would be able to authenticate users of the forest that would be synchronized by the FIM.

Regards

William