News for hackers. Stuff that matters.

A comment on Does Company ‘X’ have an Azure Active Directory Tenant?. Parent comment

Re:Does Company ‘X’ have an Azure Active Directory Tenant? by mrweasel on Saturday October 01, 2022 @10:24AM (#33046764)
Authorization and authentication. Like it or not Microsoft Active Ditectory or Azure AD (basically the cloud version) works with everything and it’s kinda the only single-signon/shared login solution for enterprises. You can build something yourself with LDAP, Kerberos and maybe Keycloak, but why bother when you more or less need AD for Windows and Exchange anyway.
[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by Eduard on Saturday October 01, 2022 @10:34AM (#33046852)
Self-hosted Gitlab instances also can act as authentication services.

Connecting git with an internal AD/LDAP allows for not requiring Azure AD.

[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by jmathai on Saturday October 01, 2022 @10:38AM (#33046890)
This isn’t a solution for enterprises, however.
[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by eastbound on Saturday October 01, 2022 @10:48AM (#33046990)
For juniors: Enterprises and even small startups need to comply with their industry’s security certification (PCI, ISO, whatever) which requires traceability of logins (and central revocation when employees quit and provably complex passwords and inability to retry 100 times, etc.)
[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by pdimitar on Saturday October 01, 2022 @10:35AM (#33046863)
I'd love to read more about it. Got any links?
[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by guoqi on Saturday October 01, 2022 @10:50AM (#33047006)
Here has one related post: API Security with OIDC by using Apache APISIX and Microsoft Azure AD

https://dev.to/apisix/api-security-with-oidc-by-using-apache...

[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by mutt2016 on Saturday October 01, 2022 @10:39AM (#33046894)
If it's just SSO, I have many good things to say about keycloak.
[ Parent | on HN ]
Re:Does Company ‘X’ have an Azure Active Directory Tenant? by aaronharnly on Saturday October 01, 2022 @11:37AM (#33047366)
We use Okta, currently with on-prem AD, but are whittling away at the use cases for the latter and hope to be AD-free once we solve for RADIUS (suggestions welcome :)
[ Parent | on HN ]