A new project is requiring us to provide users from our sister company with access to a handful of our SiteMinder protected web applications. The existing users reside within an single AD 2003 Domain. We've configured a single User Directory in SiteMinder for that Domain using the LDAP Name Space. The sister company has an AD (2003) Forest that contains three domains. Is there a recommended approach for handling this type of configuration? In other words, is it best practice to create a single User Directory for each Domain or are we better off creating a single User Directory essentially for the Forest?