Self-service with alternate domain

Question

My AD domain is domain.com and all of my users have a UPN of first.last@domain.com, which matches their email address. Everyone can login to self service using the UPN without any issue., we instruct them to use their "email address" as the uesrname.

I have a group of users in my domain that I do not host their email. They actually are part of an entirely separate AD domain and there is no trusts to that domain, nor can there be. But, thees users need logins in my domain for some of our resources, and to show up in our GAL. We have created "mail userr" objects for them in AD/Exchange. This is different than a regular AD user in that they have an AD account but the email address is an external address (like a contact) These users have a UPN of first.last@domain.com and an email address defined of first@otherdomain.com

I'd like to allow these users to login to self-service using their email address (first@otherdomain.com). To try and make this worked I added "Email" and "Email Proxy Address" as additional properties in self-service admin, properties for users section.

When I then try to login to self servce using first@otherdomain.com, I receive a red message saying "'otherdomain.com' is not operational"

Is there any way to make this work?

Comments

Hello,

Sorry for the confusion, but we are not sure we understand you correctly. Do the users in question actually exist in the domain.com domain as user accounts and have the Email property set to first@otherdomain.com? What exactly do you mean by “created mail user objects”?

Where exactly did you add the Email and Email Proxy Addresses properties? Could you, please, post here or send us (support[at]adaxes.com) a screenshot?

---

Sorry for the confusion, but we are not sure we understand you correctly. Do the users in question actually exist in the domain.com domain as user accounts and have the Email property set to first@otherdomain.com?

Correct. I do not host email @otherdomain.com within my AD domain where these users exist.

What exactly do you mean by “created mail user objects”?

In Exchange Control Panel, this is done by going to Recipients -> Contacts -> New -> Mail User. This process creats a a full AD user object that also has Exchange attributes like a contact. This tells the Exchange server the email associated with the AD user object is an external SMTP address. This object has no Exchange mailbox.

Where exactly did you add the Email and Email Proxy Addresses properties?

This was done in Adaxes Website Configuration (http://www.selfserviceurl.com/adaxesconfig) -> Common Sign In -> Sign In section -> Username sub-section -> Property for Username

The Self-Service site in the Adaxes Website Configuration is set to "use the common sign in page" under the Sign In section of the Self-Service site config

Answer 1

Hello,

Thank you for the provided details.

It looks like you have the sign in settings configured correctly. Could you make sure that the Email property of the users stores the correct email addresses? Also, please, refresh the Sign In page using Ctrl+F5 before checking the updates made to the sign in settings.

If the emails are correct, but the issue persists, please, specify the version of Adaxes you are currently using. To check that:

1. Launch Adaxes Administration Console.
2. In the Console Tree, right-click your service.
3. In the context menu, click Properties.
   
4. Adaxes version will be displayed on the General tab.
   

Comments

CTRL-F5 did the trick, it's now working.