4 ms·

I don't think it supports AAD, just AD. You got me way too exited for a minute.

easton 5y ago
It's kind of odd that they are advertising this now just as Microsoft is trying to get everyone to ditch on-prem AD. Is it just them saying "we ship SSSD in the default install now, so you can buy support from us!", or what? Some way of signing into Ubuntu with a custom SAML provider would be very cool. Windows supports it via their "credential provider"[0] framework and Google uses that to provide sign-in for Windows with your GSuite credentials. [0]: https://docs.microsoft.com/en-us/windows/win32/secauthn/credential-providers-in-windows https://docs.microsoft.com/en-us/windows/win32/secauthn/cred...
- e12e 5y ago
  I certainly hope ms will drop the need for ad (in favour of azure ad) - but it's still needed for eg azure virtual desktop (you need a vm running ad - or "azure ad ds"[1] in azure parlance). A bit frustrating, as you can otherwise join a windows 10 desktop (or vm) to just azure ad for sso etc. [1] https://docs.microsoft.com/en-us/azure/active-directory-domain-services/overview https://docs.microsoft.com/en-us/azure/active-directory-doma...
  - easton 5y ago
    That's still the most bizarre product decision Microsoft has made (to me) in the past 5 years. They are trying to get everyone to Azure and Azure AD, then they launch a product that is basically Citrix but 50% of the cost, with the catch that you need to still have on-prem AD to use it. What?
    - merb 5y ago
      > 50% of the cost well that depends, the higher subscriptions include it for free.
      - easton 5y ago
        I should of been more specific. The higher subscriptions include the licensing, so you just have to pay for compute, vs Citrix where you have to pay for Citrix Licensing, Windows Licensing, and compute.
- merb 5y ago
  actually there is a way to support azure ad for servers: https://docs.microsoft.com/de-de/azure/virtual-machines/linux/login-using-aad https://docs.microsoft.com/de-de/azure/virtual-machines/linu... it uses device authentiction. sadly not for desktops, btw. you can create your own pam provider (grant_type=password) and put it into sssd (for local cache), but that does not work with 2fa.

It's kind of odd that they are advertising this now just as Microsoft is trying to get everyone to ditch on-prem AD. Is it just them saying "we ship SSSD in the default install now, so you can buy support from us!", or what? Some way of signing into Ubuntu with a custom SAML provider would be very cool. Windows supports it via their "credential provider"[0] framework and Google uses that to provide sign-in for Windows with your GSuite credentials. [0]: https://docs.microsoft.com/en-us/windows/win32/secauthn/credential-providers-in-windows https://docs.microsoft.com/en-us/windows/win32/secauthn/cred...

e12e 5y ago
I certainly hope ms will drop the need for ad (in favour of azure ad) - but it's still needed for eg azure virtual desktop (you need a vm running ad - or "azure ad ds"[1] in azure parlance). A bit frustrating, as you can otherwise join a windows 10 desktop (or vm) to just azure ad for sso etc. [1] https://docs.microsoft.com/en-us/azure/active-directory-domain-services/overview https://docs.microsoft.com/en-us/azure/active-directory-doma...
- easton 5y ago
  That's still the most bizarre product decision Microsoft has made (to me) in the past 5 years. They are trying to get everyone to Azure and Azure AD, then they launch a product that is basically Citrix but 50% of the cost, with the catch that you need to still have on-prem AD to use it. What?
  - merb 5y ago
    > 50% of the cost well that depends, the higher subscriptions include it for free.
    - easton 5y ago
      I should of been more specific. The higher subscriptions include the licensing, so you just have to pay for compute, vs Citrix where you have to pay for Citrix Licensing, Windows Licensing, and compute.
merb 5y ago
actually there is a way to support azure ad for servers: https://docs.microsoft.com/de-de/azure/virtual-machines/linux/login-using-aad https://docs.microsoft.com/de-de/azure/virtual-machines/linu... it uses device authentiction. sadly not for desktops, btw. you can create your own pam provider (grant_type=password) and put it into sssd (for local cache), but that does not work with 2fa.