8 ms·

Interesting - lack of active directory integration, and lack of on-prem solution is disappointing though. Edit: since someone is apparently upset over my comme

by tw04 11y ago

Interesting - lack of active directory integration, and lack of on-prem solution is disappointing though. Edit: since someone is apparently upset over my comment - those two features are absolutely mandatory in almost all corporate environments. If you have a comment to the contrary, feel free to share it. Don't just downvote my comment because you don't personally need the features.

bjacobel 11y ago
Business customers of LastPass Enterprise and TeamPassword probably disagree.
- tw04 11y ago
  I'm sure they do, that doesn't in any way invalidate my statement. I can't say I have a single customer using either one. They're all using either secret server, or one of several other apps they can run on premise with AD integration.
- pwman 11y ago
  LastPass has AD Sync capability and has for years with large customers using it: https://enterprise.lastpass.com/enterprise-administration-basics/getting-started-tab/set-up-create-new-user-2/active-directory-sync/ https://enterprise.lastpass.com/enterprise-administration-ba...
AGKyle 11y ago
Really don't want to see anyone get down voted here for having an opinion. Different opinions are what drive conversation, so, I won't ignore your concerns here. I'm not super big on the terminology, but I assume on-prem is on-premise, meaning you'd like to self-host. If I have that correct then unfortunately I can't promise anything here. I will most definitely pass this along to our team though so that they know there are some requests for it. As for active directory integration. I'll be completely honest here and say I'm not totally sure how we can support this one. We use both an email, an Account Key, and a Master Password to access and decrypt your data. There isn't just a password to decrypt, we also use your Account Key combined with the Master Password. This could potentially provide some roadblocks to providing single sign on support. If you're looking at it for group integration (i.e. User X is in Group Y in AD/LDAP then they are in Group Y on 1Password for Teams), that might be a different story. I'll also pass your concerns and feedback for this one along. I hope those are at least something, though I can certainly understand that it might not be to your liking. But if you have feedback or can help me understand things more I would certainly appreciate it. I'm just a developer and have never been a system admin, nor have I worked in a corporate environment. That leaves me a little green on those topics :) Kyle AgileBits
- tw04 11y ago
  Correct - on-prem = on-premise. AD integration meaning yes, ability to tie users/groups between 1password and existing AD infrastructure. The idea there being that if a user is terminated, and their AD account is deleted/locked out, everywhere else is locked at the same time. Having to go to 20 different systems to try to clean them out is a great way to miss accounts :)
  - AGKyle 11y ago
    Hey, thanks so much for that. Seriously, means a lot to come in here and know full well you're not really the right person to answer the question but give it a shot anyway and the other party is gracious enough to explain it. I will definitely be passing this along so we have some proper request information on hand. My bosses are reading this, one has even interacted in this discussion already so they're seeing this already but I'll make it a bit more official tonight when I write up a summary of what I seen requested. Thank you again for taking the time to make sure I was on the right track. Kyle AgileBits
    - jms703 11y ago
      Recommend including LDAP integration in addition to Active Directory. With such a large Mac userbase, you're likely to have more customers using LDAP than AD.
      - keeper 11y ago
        Keeper Enterprise has AD / LDAP integration! Check us out https://keepersecurity.com/enterprise.html https://keepersecurity.com/enterprise.html
    - deleted 11y ago
      [deleted]
    - samirageb 11y ago
      1pw user here and long time AD architect. If you have any questions around AD/LDAP, I'd be happy to answer what is 'common' when dealing with AD-integrated solutions.
jforman 11y ago
Baby steps to taking on Okta et al. They're going up market with this launch — doesn't seem wise to jump too far at once.
keeper 11y ago
Have you tried Keeper Enterprise? We have AD/LDAP integration - it was a mandatory feature for us too. In regards to on-prem, Keeper uses zero-knowledge encryption - which means the encryption keys are stored locally on the end-user device. We have over 3k businesses signed up, many of them in the Global 2000 (and 9M consumer users). Our enterprise customers are happy with our cloud architecture because of the zero-knowledge encryption and regular SOC-2 audits.

by tw04 11y ago

bjacobel 11y ago

Business customers of LastPass Enterprise and TeamPassword probably disagree.

tw04 11y ago
I'm sure they do, that doesn't in any way invalidate my statement. I can't say I have a single customer using either one. They're all using either secret server, or one of several other apps they can run on premise with AD integration.
pwman 11y ago
LastPass has AD Sync capability and has for years with large customers using it: https://enterprise.lastpass.com/enterprise-administration-basics/getting-started-tab/set-up-create-new-user-2/active-directory-sync/ https://enterprise.lastpass.com/enterprise-administration-ba...

AGKyle 11y ago

Really don't want to see anyone get down voted here for having an opinion. Different opinions are what drive conversation, so, I won't ignore your concerns here. I'm not super big on the terminology, but I assume on-prem is on-premise, meaning you'd like to self-host. If I have that correct then unfortunately I can't promise anything here. I will most definitely pass this along to our team though so that they know there are some requests for it. As for active directory integration. I'll be completely honest here and say I'm not totally sure how we can support this one. We use both an email, an Account Key, and a Master Password to access and decrypt your data. There isn't just a password to decrypt, we also use your Account Key combined with the Master Password. This could potentially provide some roadblocks to providing single sign on support. If you're looking at it for group integration (i.e. User X is in Group Y in AD/LDAP then they are in Group Y on 1Password for Teams), that might be a different story. I'll also pass your concerns and feedback for this one along. I hope those are at least something, though I can certainly understand that it might not be to your liking. But if you have feedback or can help me understand things more I would certainly appreciate it. I'm just a developer and have never been a system admin, nor have I worked in a corporate environment. That leaves me a little green on those topics :) Kyle AgileBits

tw04 11y ago
Correct - on-prem = on-premise. AD integration meaning yes, ability to tie users/groups between 1password and existing AD infrastructure. The idea there being that if a user is terminated, and their AD account is deleted/locked out, everywhere else is locked at the same time. Having to go to 20 different systems to try to clean them out is a great way to miss accounts :)
- AGKyle 11y ago
  Hey, thanks so much for that. Seriously, means a lot to come in here and know full well you're not really the right person to answer the question but give it a shot anyway and the other party is gracious enough to explain it. I will definitely be passing this along so we have some proper request information on hand. My bosses are reading this, one has even interacted in this discussion already so they're seeing this already but I'll make it a bit more official tonight when I write up a summary of what I seen requested. Thank you again for taking the time to make sure I was on the right track. Kyle AgileBits
  - jms703 11y ago
    Recommend including LDAP integration in addition to Active Directory. With such a large Mac userbase, you're likely to have more customers using LDAP than AD.
    - keeper 11y ago
      Keeper Enterprise has AD / LDAP integration! Check us out https://keepersecurity.com/enterprise.html https://keepersecurity.com/enterprise.html
  - deleted 11y ago
    [deleted]
  - samirageb 11y ago
    1pw user here and long time AD architect. If you have any questions around AD/LDAP, I'd be happy to answer what is 'common' when dealing with AD-integrated solutions.

jforman 11y ago

Baby steps to taking on Okta et al. They're going up market with this launch — doesn't seem wise to jump too far at once.

keeper 11y ago

Have you tried Keeper Enterprise? We have AD/LDAP integration - it was a mandatory feature for us too. In regards to on-prem, Keeper uses zero-knowledge encryption - which means the encryption keys are stored locally on the end-user device. We have over 3k businesses signed up, many of them in the Global 2000 (and 9M consumer users). Our enterprise customers are happy with our cloud architecture because of the zero-knowledge encryption and regular SOC-2 audits.