I think I have a similar scenario. I would like to have a second join point to the same domain with a different set of groups to use in an authentication sequence for the MyDevices portal. (I only want a specific group of users to utilize the portal....