Community,
I have 4 total domains, 1 Global Domain and 3 Leaf domains under the Global. I have external authentication configured in the Global Domain on the FMC via LDAP integration and it is working great. However, I have 2 new users who I only want to have access to leaf domain 3 that is under the global domain when they log in. I was able to create a local user under the Global domain and only allow that local user access to the leaf domain 3 in the User Control Configuration; however, I was wondering if there is a way to accomplish the same thing via an LDAP account? I can control what Role an LDAP user gets, but have not been able to figure out how to control what tenant the user is dropped into after they log in (using LDAP accounts). So far all LDAP users get dropped into the Global Domain with their respective user role. Is this possible to drop an LDAP user into a specific leaf domain after logging in?
Thank you.
