By Zach DeMeyer Posted July 22, 2018
The holy grail in the identity and access management (IAM) space is the ability to enable a user to easily and seamlessly access whatever IT resources they need. With this ability, an IT admin can simply provision, deprovision, and modify user access from a centralized console. Sounds too good to be true, right? Well the identity management capability True SSO (single sign-on) is on its way to achieving that goal.
The Beginnings of Modern Identity Management
In order to understand the current identity and access management landscape, we need to take a step back into history. The modern era of identity management started with the introduction of the LDAP protocol. Created by JumpCloud advisor, Tim Howes, and his colleagues at the University of Michigan in 1995, LDAP enables use of lightweight directory access and authorization. This authentication protocol would then spawn two major identity providers – Microsoft® Active Directory® (MAD or AD) and OpenLDAP™. Active Directory would go on to dominate the commercial sector, while OpenLDAP would lead the open source directory services category.
Although both had holds on their specific spaces, the reason MAD was so successful overall was due to how integrated it was with the Windows® platform. A user would simply login to their machine and then have access to virtually any on-prem Windows-based resource, including servers, applications, file servers, and the network itself. For IT admins, as long as the IT resource was Windows-based, they had relatively easy control. And, since most early IT environments were based in Windows, MAD was a choice identity management tool.
The Cloud Changes the IAM Space
The MAD approach to IAM was great while it lasted. Soon, however, a wide range of non-Windows IT resources emerged. Many of these were delivered from the cloud, which revolutionized the generally on-prem IT world. Not only that, systems such as Mac® and Linux® also hit the scene. These changes, of course, broke the easy login and management model.
IT admins leveraging AD were, at that moment, out of luck. To bolster AD for the cloud era, a number of web application SSO solutions arose. With these, AD could connect to cloud-based resources and, through a bit of finneagling, other systems as well. Unfortunately, these web-app SSO solutions add layers of complexity and cost to IT admins.
Identity Management Capability: True SSO with JumpCloud®
The good news is that a new generation of cloud identity management solution appeared to address this pain point. The solution leverages the concept of True SSO – securely managing and connecting users to the IT resources they need, including systems, applications, files, and networks regardless of platform, protocol, provider, and location. This identity management capability, True SSO, is striving to be the holy grail of the IAM space.
This next generation solution is called JumpCloud® Directory-as-a-Service®. With JumpCloud, organizations can leverage True SSO for almost any resource imaginable, no matter the locale or platform. This is thanks to the LDAP and SAML protocols used by Directory-as-a-Service for connecting users with their applications, whether on-prem or in the cloud. JumpCloud Directory-as-a-Service also provides access to the RADIUS protocol for securely connecting users to the internet, as well as access to Samba or NAS-based file storage systems, all in one cloud-based solution. These identity management capabilities and more are making it a reimagination of AD for the cloud era.
Learn More About JumpCloud
To explore the identity management capability, True SSO, with JumpCloud, sign up for Directory-as-a-Service today. You can sign up for free without a credit card, and get your first 10 users free as well. If you have any questions, contact us, or check out our knowledge base.