Server Configuration > Post Install Server Security > Choosing Your Security Policy > Specifying Scheme Order
Specifying Scheme Order
When using multiple security schemes based on the client’s IP address, the order the security realms are specified in must be the same for all IP addresses. The default ordering is specified by the setting. For example, if the default ordering is the following:,windows_clear,
then the following scheme orders are valid:, windows_private,
mksdomain_private, mksdomain_clear, mksdomain_private
but the following scheme orders are not valid:, windows_private,
windowsSSO_private, windowsSSO_clear, windowsSSO_private
If the default scheme does not contain the complete list of security realms, then you must use the mks.usersDomain property to specify the order. For example, the following is a valid combination of settings:
mks.usersDomain=ads,mksdomain, mksdomain_clear,windows_private,
Specifying the security realm order also resolves potential issues if the same user is defined with an identical user name in more than one security realm. The user is authenticated from the security realm that appears first in the list.