Configuring Thinfinity AD Cache
This article presents the steps to configure the Thinfinity AD Cache (RemoteAD) role, the Directory Services connector that lets Thinfinity Workspace authenticate against an Active Directory domain that is not on the local network. For what AD Cache is and how it fits the identity model, see Understanding AD Cache (RemoteAD).
The AD Cache role is offered in the Services tab only when the machine is joined to an Active Directory domain.
Set Thinfinity Workspace Role as AD Cache
Launch the Thinfinity Configuration Manager, navigate to the Services tab, select AD Cache, and select Apply.
Set the Network ID Parameter
In the General tab, go to the Gateways section and enter the same Network ID used in the Gateway configuration, so this node is registered within the same Thinfinity Workspace network.
Configure the AD Cache Parameters
In the AD Cache tab, set the root group, the groups new users are added to, and the API Key that identifies this external AD across nodes. For the meaning of each field, see the AD Cache Tab reference.
The AD service account and the Active Directory rights it needs are covered in AD Cache — Service Account and Required Permissions.
To join several AD Cache nodes to the same external domain, copy the exact API Key to every AD Cache service in the network. For deployments that serve more than one domain, see Configuring AD Cache for Multiple Domains.
Commit Changes
Select Apply to finalize the configuration.
The AD Cache node must be joined to the Active Directory domain it serves — that is why the role appears only on domain-joined machines. The rest of the Thinfinity Workspace components do not need to join that domain: keeping them out of it, with no domain trust, is what this role exists for.
For detailed instructions about production deployments, check out the Best Practices section in this manual.