Hi,

We would require two way external/transitive trust between the two domains.

There are 2 ways to work around our problem:

1. Install another ACS at the remote site/domain and forward all the

requests for the users of remote domain to that ACS.

2. Configure partner domain as LDAP on the ACS (at corp site), this should not require domain trust. The only problem we will have certain authentication methods will not be supported when using ldap.

Here is the complete list of stuff which is supported with LDAP:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server​_for_windows/4.1/user/Overvw.html#wp824733​

Hope that helps!

Regards,

~JG

Do rate helpful posts