Hi RS,

It seems you are talking about dynamic users (User that are stored in AD). Dynamic users are not replicated and there is no need to worry about. Backup ACS will show those user once they are authenticated by secondary server.

This is how it works

--> USER1-------> Got authenticated via Primary ACS---> This user will show up in user database and further it will not be replicated to secondary ACS, so --> Secondary ACS will not show USER1 in its database.

Now our primary server goes down.

---> User1 tries to login again ---> Will be authenticated via Secondary ACS---> Now you will see this user in its database.

Hope that helps!

Regards,

~JG

Do rate helpful posts