Configure MID Server domain separation

You can configure domain separation for specific MID Servers and IP address ranges to prevent data visibility between domains.

About this task

Note: When you set the MID Server user credentials in the config.xml file, make sure they are in the proper domain. This user determines the credentials the MID Server uses when it logs in and the domains it can access.

To make MID Servers and the data they return domain specific:

Procedure

  1. Configure the forms in the following tables to show the sys_domain and sys_domain_path fields.
    Table 1. Records to configure for MID Server domain separation
    Table Navigation Description
    MID Server [ecc_agent] MID Server > Servers Set the domain for a specific MID Server to prevent a workflow from giving work to a MID Server in another domain. The system uses this value to group MID Servers by domain in choice list for Discovery and Orchestration.
    MID Server IP Range [ecc_agent_ip_range] MID Server > IP Ranges Define the domain for a specific IP range. When domains are defined for IP ranges and for MID Servers, the IP Ranges related list in a MID Server record only displays ranges from that MID Server's domain.
    Credentials [discovery_credentials]
    • Discovery > Credentials
    • Orchestration > Credentials
    Assign credentials to a specific domain. This action prevent domains from having access to each other's credentials.
    Queue [ecc_queue]
    • Discovery > Outputs and Artifacts > ECC Queue
    • Orchestration > Definition > ECC Queue
    Configure domain separation for work in the ECC Queue. This prevents a MID Server in one domain from picking up work for another domain and protects each domains collected data.
  2. Click the lookup icon in the Domain field and select a domain from the list.
  3. Enter a path in the Domain path field.
  4. Click Update.