Hello,

Must a user license come from the same LFDS server as the Repository server is registered to?

This configuration works:

• I have two domains, called org.local and orgtest.local.
• orgtest.local trusts org.local
• In each domain is an LFDS site, called LFDSProd and LFDSTest. 
• In orgtest.local is a repository called RepoTest.
• LFDSTest is configured with two identity provider: org.local and orgtest.local
• LFDSTest is synchronising the members of groups in orgtest.local
• orgtest.local groups contains users from org.local. 
• LFDSTest can synchronise and the org.local users are given licenses from the LFDSTest pool.
• The org.local users are given "trusted" rights to RepoTest. (this also works via groups but am trying to simplify the description)
• Presently, these org.local users *are* able to authenticate and log on to RepoTest.

Now the iffy part...

• If the users are removed from orgtest.local groups, and are assigned licenses from LFDSProd instead of LFDSTest, would they still be able to authenticate onto RepoTest?
• Must a user license come from the same LFDS server as the Repository server is registered to?

-Ben