We have an AlwaysOn Availability Group setup (DB1+DB2) and also a web server (Web1) outside of the domain that we need to connect to the AG using Windows Authentication.
The following Windows Users/SQL logins have been set up:
Web1 Windows: Web1\User DB1 [AG Primary] Windows: DB1\User SQL Login: DB1\User SQL User: DB1\User (from DB1\User login) DB2 [AG Secondary] Windows: DB2\User SQL Login: DB2\User
Because the secondary is read-only I cannot add the corresponding DB2 SQL User until we failover to it, and this is impractical due to the frequency we add users.
Is there a way on the DB1 primary to add DB2\User pointing to DB2\User login? Or a better way of doing this while still using Windows Authentication.