Scaling Trusted Agents for Request Routing

You can use Trusted Agents Groups to allow request routing to specific groups of Trusted Agents Services, whether in the same or different private networks. If Private Resources reside in multiple private networks, Trusted Agents Services may be provisioned in each of those private networks to allow communication with those Private Resources. Trusted Agents Groups may be used to route requests to the appropriate Trusted Agents Services in each private network.

For example, consider a sample distributed network that contains more than one Active Directory (AD) domain, such as a "Denver" domain and a "Seattle" domain. While these domains may have an AD trust between them, authentication requests may be more efficient if "Denver" domain requests are routed to Denver AD domain controllers and "Seattle" authentication requests are routed to "Seattle" AD domain controllers. Routing of requests in this way can be accomplished using Trusted Agents Service scale-out. The diagram below shows how this scale-out might occur.