2 ms·
I think the big seller/on-ramp is Azure Active Directory. Once you’re all set up to permission your shared documents in Office, and log into your corporate mach
by sempron64 6y ago
I think the big seller/on-ramp is Azure Active Directory. Once you’re all set up to permission your shared documents in Office, and log into your corporate machines with the same accounts, those permissions are automatically available to cloud services. Authentication/authorization is built in automatically to any app you want to spin up, much more easily than syncing your ldap accounts to AWS or creating them manually, and/or manually building auth for your internal app. So internal apps and resources end up on azure, and other usages follow.
- verst 6y agoDisclaimer: I work for Microsoft, but I'm not here to tell you to use Azure - just providing an example for the use of AAD. Kubeflow is an OSS framework for doing distributed data science / machine learning (including Tensorflow hence the name) on Kubernetes. With the AAD integration it's just much more convenient to give a team of data scientists access to a Kubeflow Kubernetes cluster - AAD with the Kubeflow OpenIDConnect component will handle AuthN & AuthZ. Kubeflow itself sets up different Kubernetes namespaces for each authorized user upon first login. You definitely don't need to run Kubernetes on AKS or Azure in general to take advantage of the AAD features.