It's not really broken, you just need to define the domain if it's not your current domain. Broken means it doesn't work, but it works exactly as defined. You need to tell it where you're wanting to authenticate against.