Auth Connector - users from child domain are not properly synced

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Auth Connector is deployed on Windows Server which is part of setup consisting of multiple domains and child domains. Users from one child domain are not synced to Cloud SWG 

Environment

• Cloud SWG integrated with Auth Connector

 

Cause

  The issue stems from a trust problem between two forests.  

Resolution

  When setting up trust between all child and parent domains, ensure you disable SID filtering on both sides.