We have a requirement to support more than one form of authentication. If our 1/ SAML based Authentication provider is down, we want to fall back on AD (Active Directory) for authentication. Can DataMiner support this?
bruno santos [SLC] [DevOps Advocate] Selected answer as best 16th June 2023
Hi Bruno,
Mixing 2 external authentication systems like SAML and AD accounts is not supported, you can although combine an external authentication with local users.
There is a workaround, and that is combining 2 DMAs in a DMS, one DMA uses SAML, the other AD. This technically works, I'm aware of at least one system doing this, but I do have to add that this is not validated or actively tested in our QA environment.
Bert
Baptiste Pattyn [SLC] [DevOps Advocate] Posted new comment 6th July 2023
Note that this will not work when the system is connected to dataminer.services since we load balance requests over multiple agents, so we can not force any of the two authentication methods.