5 ms·
This seems promising. I've been the google superadmin on a few companies and the fight between AD/LDAP and other services and online applications was always hac
by arca_vorago 9y ago
This seems promising. I've been the google superadmin on a few companies and the fight between AD/LDAP and other services and online applications was always hackish. I wonder if the sync is still using this: https://support.google.com/a/answer/106368?hl=en https://support.google.com/a/answer/106368?hl=en
The benefit was that AD was the authority, so companies still felt "in control". If Cloud Identity is moving authority over to google, that might be an issue, but if it does it well, probably not so much.
The entire LDAP/AD/SSO area is ripe for disruption, because far too many companies are trying to be google and force it all online. Many companies would just be happy with a robust on-premise solution that could replace or augment the others completely.
Don't get me started on radius...
- r00fus 9y agoLDAP/AD and SSO are two different beasts. Everyone uses SAML in my experience and it's a bit clunky but it works and the edge cases are fairly well known. Is this actually a competitor to AD?
- arca_vorago 9y agoI don't think it's designed as a competitor to AD, but rather to smooth the AD-cloud user transition, especially as more and more companies buy into SaaS like O365/GApps, etc. You are right about SAML of course, but my point is how the lines between SSO/SAML etc and AD/LDAP etc are getting blured because companies want them to essentially work as a single unit. Here are a couple of the interesting alternatives in the arena: https://github.com/apereo/cas https://github.com/apereo/cas https://www.univention.com/products/ucs/ https://www.univention.com/products/ucs/ https://www.shibboleth.net/ https://www.shibboleth.net/ https://wso2.com/ https://wso2.com/ One of my planned side projects is to test each of these.