aXsGUARD Identifier 3.0.2.0 Product Guide v1.5
Organization
21.6
Typical DIGIPASS Location Models
Domain Root
DIGIPASS records may be stored in the Domain Root while unassigned.
This option allows a centralised point of access for assignment of DIGIPASS records. It also requires less
calculation and high-level administration - DIGIPASS records are all stored in one area and there is no need to
manually move records or calculate the exact number of DIGIPASS required for each Organizational Unit or group
of Units.
Image 47: DIGIPASS Record Location – Domain Root
In the diagram above, the aXsGUARD Identifier searches upwards through the Organizational Unit structure for an
available DIGIPASS record to assign to a DIGIPASS user in the Organizational Unit B1. Because no available
DIGIPASS records are found in B1, it searches in B, then in the Domain Root.
The administrator account manually assigning the DIGIPASS records must be located in the Domain Root (no
Organizational Unit) for this model to work successfully.
This option is simplified if an Organizational Unit structure is not used in the database. User Accounts and
DIGIPASS records may all be stored in the Domain Root. The
Search Upwards in Organizational Unit hierarchy
option does not need to be enabled in this case.
Note
The
Search Upwards in Organizational Unit hierarchy
option must be enabled for this model to
function correctly.
©
2009 VASCO Data Security
129
