For our fourth installment in this series of blog posts, we will discuss the third major requirement for a modern directory service: device management. We’ve already discussed the first two requirements for a modern identity provider which are cloud-based and being ubiquitous.
Some of you may be asking, why does device management play a role in a directory? Most directory solutions eschew device management and only focus on user management. OpenLDAP, for instance, does not play a role in managing the device.
Managing users, of course, is a core requirement of any directory service. Managing users means being able to add, delete, and modify user records. It includes the ability to connect users to the devices and applications they need. Virtually any centralized user management system today is able to manage users, but a modern directory service doesn’t stop with user management as the definition of management.
As any Active Directory admin knows, the ability to manage devices is critical to directory services. Admins can set policies, control access, and troubleshoot issues remotely. Active Directory does this through Group Policy Objects (GPOs). Admins can choose from a variety of templates or script their own tasks.
With Macs starting to make up significant parts of an enterprise’s computer population, it is critical to managing Mac devices for access and security. To date, Macs and Linux machines have largely remained as unmanaged devices and as a result, this means users aren’t controlled. Consequently, neither is a company’s data.
Device management can include tasks such as ensuring user passwords are set according to certain criteria, rotated on a certain schedule, as well as the disabling of guest accounts, OS or installed software patching, and many other policy-related needs companies require on end-user devices. In short, proper device management gives admins the ability to execute critical tasks ad hoc or scheduled. The admin can execute tasks using whatever language they want and that is supported by the device. In addition, the ability to authenticate and manage devices enables admins to have complete control over their environment.
Modern Directory, Modern Device Management
If you can’t manage all of the devices within your organization, that’s a critical deficiency in your directory service. As you begin to think about a modern directory, add deep device management capabilities as a critical requirement. JumpCloud® is the modern directory to meet all your needs. We think you will truly benefit from the Directory-as-a-Service® feature device management. Go ahead; get started by signing up today.