What you likely need to do here if you have an SSO frontend that can handle the authentication piece properly, is on our side, put the QVS service into DMS security mode instead of NTFS, and I believe you should likely be able to configure a DSC DSP to get to the other directory, you may have to specify a specific account to read from it depending upon trust relationship etc., but if you can then read, that will allow you to choose users/groups from both domains at that point, and all QVS will be checking for is whether we have a match to a name or group when it gets it from the web server. Most of the time the web server is using Header Auth setup in these cases. Hopefully this may help a little, but to Daniele's point, if the web server is set to use NTLM, then you would have to have trusts in place between the domains such that the web server would be able to process authentication requests for either domain. Hopefully this makes a little sense.
Regards,
Brett
To help users find verified answers, please do not forget to use the "Accept as Solution" button on any post(s) that helped you resolve your problem or question.
I now work a compressed schedule, Tuesday, Wednesday and Thursday, so those will be the days I will reply to any follow-up posts.
.png "Former Employee"){kind=icon}