By Rajat Bhargava Posted July 25, 2019
Organizations that are using Microsoft® Azure® Active Directory® must address the following question: how do you authenticate LDAP requests to the cloud-based directory?
In a case where the application that needs to authenticate against Azure AD is located within the Azure domain, the organization can just use Azure AD’s LDAP integration.
However, the problem arises when on-premises applications or those hosted at other providers need to authenticate using LDAP. In these instances, IT organizations must figure out another solution.
Suffering From The LDAP Authentication Blues?
Organizations really have two options: implement their own LDAP system or leverage a Directory-as-a-Service® platform.
Organizations that decide to implement their own LDAP system will be responsible for the hardware, software, installation, configuration, and ongoing maintenance. The LDAP system will be an authentication system and as a result, the system will need to be highly available. In addition, applications will need to be configured and connected to the OpenLDAP server. Finally, the servers will need to be hosted somewhere and allow all of the applications to connect to the LDAP infrastructure.
A Cloud-Hosted Antidote
The other alternative is to leverage a SaaS-based LDAP infrastructure.
This cloud-hosted LDAP endpoint enables applications hosted on-premises or in the cloud to authenticate against it. IT admins don’t need to install, configure, manage, monitor, or maintain the infrastructure. The Directory-as-a-Service provider does all of the heavy lifting.
The other benefit is that the LDAP schema has been standardized, enabling quicker integration of applications. In fact, applications such as Atlassian Jira, JAMF, Casper, MySQL, OpenVPN, and others have standard integration documentation. There is also standard documentation on how other LDAP applications can be integrated. This level of support ensures that IT admins aren’t left on their own without help.
Azure LDAP Integration With JumpCloud®
Many organizations are leveraging LDAP applications that aren’t hosted within Microsoft Azure. For these situations, Microsoft Azure Active Directory isn’t a viable solution; IT organizations will need to look elsewhere for an LDAP solution.
A new generation of solutions called Directory-as-a-Service is offering a cloud-hosted LDAP solution. Organizations use the service under a SaaS model and only pay for what they need and use. There is no heavy lifting. Instead, IT just gets to use the functionality.
If you would like to learn more about how Azure AD can be integrated with an LDAP endpoint, drop us a note. We’d be happy to share more detailed information with you. Or, feel free to try JumpCloud® Directory-as-a-Service for free.