title: IBM Domino and authentication against Active Directory for web users
body: <p>I have succesfully configured IBM Domino authentication against Active Directory for web users by following the 
  <a href="https://www-10.lotus.com/ldd/dominowiki.nsf/dx/Streamlining_passwords_and_achieving_SSO_for_users_on_Windows_platforms" rel="nofollow noreferrer">https://www-10.lotus.com/ldd/dominowiki.nsf/dx/Streamlining_passwords_and_achieving_SSO_for_users_on_Windows_platforms</a> .. and .. <a href="http://www-01.ibm.com/support/docview.wss?uid=swg21293255" rel="nofollow noreferrer">http://www-01.ibm.com/support/docview.wss?uid=swg21293255</a> tutorials. Now user can authenticate even there is no Person document in my Domino directory. Is there a way how to avoid authentication when Person document missing for particular user? </p>
  
  <p>Based on this <a href="https://www-10.lotus.com/ldd/dominowiki.nsf/dx/Streamlining_passwords_and_achieving_SSO_for_users_on_Windows_platforms" rel="nofollow noreferrer">tutorial</a> and 'step 2' section I assumed, that when I dont specify LN user name in AD then Domino tries to find Person document in names.nsf based on user's email. But it doesnt work this way. Without specifying Notes name in AD, Domino server have no idea what is Notes user name for just authenticated user. Is here any way how to configure this in a way, that Domino authenticates only users available in names.nsf and not all these in AD?</p>