The Cisco AD agent communicates with your ASA’s to make this happen. You can have multiple ASA’s talk to a single agent or vice-versa. This allows you to scale identity across domains, forests, and ...