Chained functions combine together functions of more than one subsystem.
For example, when a user login, Content Services tries to match the user’s credentials against each of the subsystems in the chain in order.
- If a chain member accepts the credentials, the log in succeeds
- If no chain member accepts, the log in fails
User registry export is also chained. During a synchronize operation, users and groups are exported from each member of the chain supporting user registry export (that is, those of type LDAP) and imported into Content Services. Ordering in the chain is used to resolve conflicts between users and groups existing in the same directory.
Note: If you need to federate against
multiple authentication subsystems, it is recommended to use the Identity Service rather
than defining multiple subsystems on the authentication chain.