3 ms·
I genuinely don't know what AD is used for. If you need SSO, why not just use a SSO/SAML IdP?
by computerfriend 4y ago
I genuinely don't know what AD is used for. If you need SSO, why not just use a SSO/SAML IdP?
- dmarlow 4y agoWhat's the source of data and truth for your SSO?
- computerfriend 4y agoThe SSO IdP itself.
- barbazoo 4y agoAAD can be used as a SAML IdP. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/auth-saml https://learn.microsoft.com/en-us/azure/active-directory/fun...
- mnd999 4y agoOpenID Connect seems like the current popular flavour. SAML seems to be increasingly considered legacy.
- cratermoon 4y agoIndeed legacy, but you know how Fortune 500 companies are about new technology not directly relevant to their line of business. Also, SAML as a spec is really complex precisely because it was created to satisfy a broad range of Enterprise-y requirements. I don't know if OpenID Connect is there yet. It certainly could be, the underlying spec (oauth2) could support a lot of variant complexity, and OIDC supports mobile and there are lot of extensions available or in progress. https://openid.net/developers/specs/ https://openid.net/developers/specs/