We have an AlwaysOn Availability Group setup (DB1+DB2) and also a web server (Web1) outside of the domain that we need to connect to the AG using Windows Authentication.
The following Windows Users/SQL logins have been set up:
DB1 [AG Primary]
SQL Login: DB1\User
SQL User: DB1\User (from DB1\User login)
DB2 [AG Secondary]
SQL Login: DB2\User
Because the secondary is read-only I cannot add the corresponding DB2 SQL User until we failover to it, and this is impractical due to the frequency we add users.
Is there a way on the DB1 primary to add DB2\User pointing to DB2\User login? Or a better way of doing this while still using Windows Authentication.