Exhibit.

The diagram represents me contents of a single Active Directory forest. Assume that all employees hove employeeType set to employee and contractors have employeeType set to contractor.
is the following configuration valid for the given scenario?
Solution:
The customer needs to query only Employees from Domain A and Contingent Workers from Domain B Fotests:
1. DN - dc=domains, dc=com;TLS =No; Server = server,domaina.com
2. DN - dc=domaininb,dc=com;TLS =No; Server = server,domaina.com
search DNS:
1. DN - OU=users, DC=domains, DC=com; LDAP Filter = (employeeType=employee
2. DN - OU=Contingent Workers, OU=Users, DC=domainb, DC=com
Correct Answer: B
The configuration provided is not valid due to an error in the server specification for Domain B. The server for Domain B (domainb.com) is incorrectly set to server.domaina.com, which is not correct. Each domain in the Active Directory (AD) forest should have its own respective server. For Domain B, the correct server should be something like server.domainb.com, assuming that there are distinct domain controllers for each domain.
Additionally, the search DN for Domain A appears to be valid as it correctly filters for employees with (employeeType=employee). The search DN for Domain B seems to be partially correct, as it targets the OU=Contingent Workers, but the issue lies with the incorrect server assignment.
Key Reference from SailPoint Documentation:
* Active Directory Configuration: Each domain in a forest should be connected to its respective server, and incorrect server assignments between domains can cause LDAP search and synchronization issues.
Proper domain controller assignment for both domaina.com and domainb.com is required.