{"id":62624,"date":"2022-05-10T11:00:00","date_gmt":"2022-05-10T15:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=62624"},"modified":"2024-11-14T19:41:59","modified_gmt":"2024-11-15T00:41:59","slug":"active-directory-authentication","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication","title":{"rendered":"A Complete Guide to Active Directory Authentication"},"content":{"rendered":"\n<p>Every organization has an organizational structure to define employees\u2019 roles and responsibilities; it\u2019s often broken down by departments such as sales, marketing, and IT. It\u2019s usually necessary to enforce access control for enterprise resources so that users remain productive while meeting your compliance and data privacy obligations.<\/p>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/blog\/active-directory-faq\">Active Directory (AD)<\/a> authentication is one such measure you can use to manage users, applications, and other assets within the organization. AD authentication can simplify IT administration and enhance the overall security posture of the enterprise. However, it can fall short in modern enterprises where employees are located in many different places and its identity lifecycle management is a manual process that can increase the attack surface.<\/p>\n\n\n\n<p>This article is intended to help you learn more about AD authentication, how it works, and how JumpCloud can help you modernize its operations for greater efficiency, interoperability, and security.<\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/0IRFgzD1MBA?si=3vK7EPD82pq4XY4l?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading1\"><strong>What Is Active Directory Authentication?<\/strong><\/h2>\n\n\n\n<p>AD authentication is a Windows-based system that authenticates and authorizes users, endpoints, and services to Active Directory. IT teams can use AD authentication to streamline user and rights management while achieving centralized control over devices and user configurations through the <a href=\"https:\/\/jumpcloud.com\/blog\/what-are-group-policy-objects\">AD Group Policy feature<\/a>.<\/p>\n\n\n\n<p>It also provides limited <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-single-sign-on-sso\">single sign-on (SSO)<\/a> functionality, allowing users only to authenticate once and then seamlessly access any corporate resource in the domain(s) for which they\u2019re authorized. AD authentication is a successor to LAN Manager (LM) and <a href=\"https:\/\/en.wikipedia.org\/wiki\/NT_LAN_Manager\" target=\"_blank\" rel=\"noreferrer noopener\">NT LAN Manager (NTLM)<\/a>, protocols which were easily exploitable.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Microsoft is in the process of <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/windows-it-pro-blog\/the-evolution-of-windows-authentication\/ba-p\/3926848\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">deprecating NTLM<\/a>. It provides admins with tools to block and track it as it makes the transition to Kerberos as its de facto authentication process.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>For example, LM used a fragile cryptographic scheme that modern processors could easily crack. Although NTLM \u2014 which succeeded LM \u2014 had some security enhancements around the strength of cryptography, it couldn\u2019t provide mutual authentication and smart card authentication services. Due to these weaknesses, Microsoft replaced LM and NTLM protocols with AD starting with Windows 2000 Server operating systems (OSs).<\/p>\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/large-202303-EB-Resource-BreakingUpWithAD-290x175-SiteDisplay-aspect-ratio-160-110.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            Breaking Up with Active Directory        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            Don\u2019t let your directory hold you back. Learn why it\u2019s time to break up with AD.        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/resources\/ebook-breaking-up-with-active-directory\" data-promo=\"Breaking Up with Active Directory\" class=\"button is-primary-green promo-small-banner-link\">Read Now<\/a>\n    <\/div>\n<\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading2\"><strong>How Does Authentication Work in Active Directory?<\/strong><\/h2>\n\n\n\n<p>Active Directory authentication is a process that supports two standards: <a href=\"https:\/\/www.techtarget.com\/searchsecurity\/definition\/Kerberos\" target=\"_blank\" rel=\"noreferrer noopener\">Kerberos<\/a> and <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap-authentication\">Lightweight Directory Access Protocol (LDAP)<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Kerberos Protocol<\/h3>\n\n\n\n<p>In a Kerberos-based AD authentication, users only log in once to gain access to enterprise resources. Instead of passing on the login credentials over the network, as is the case with LM and NTLM protocols, the Kerberos system generates a session key for the user. The generated session key lasts for a designated period, providing flexibility to users when it comes to authentication.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">How Kerberos Works<\/h4>\n\n\n\n<p>Besides the session key, the Kerberos system also generates a token containing all the access policies and rights associated with the user. This ensures that users only access resources they are authorized to.&nbsp;<\/p>\n\n\n\n<p>If a client wants to connect to the AD server or the <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-a-domain-controller\">domain controller (DC)<\/a> in this case, they must authenticate themselves to a key distribution center (KDC), which is a trusted third party. The KDC consists of two servers: authentication server (AS) and ticket granting server (TGS). The AS encrypts clients\u2019 login credentials by using their password\u2019s secret key. This is how the AS authenticates clients to the network.<\/p>\n\n\n\n<p>After getting authenticated, the AS sends the user a ticket granting ticket (TGT), which is encrypted with a different secret key. When the client receives the TGT, it transmits it to the TGS alongside an authorization request to access the target resource on the server. The TGS then decrypts the TGT with its secret key that it shares with the AS.&nbsp;<\/p>\n\n\n\n<p>Next, the TGS issues a token to the client that it encrypts with another key. The third secret key is shared between the target server and TGS. Finally, the client transmits the received token to the target server. When the target server receives the token, it decrypts it with the TGS shared key to allow the client to access resources for a limited time (session).&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Security Concerns<\/h4>\n\n\n\n<p>Kerberos is vulnerable to several known methods of attack, including Kerberoasting, Golden Tickets, Pass the Ticket, et al. For this reason, Microsoft has <a href=\"https:\/\/jumpcloud.com\/blog\/active-directory-modernization-is-mandatory\">prescribed<\/a> several Entra ID and Defender services to protect identities and detect lateral movement throughout its stack.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Note:<\/strong> Microsoft has deemed AD to be a legacy product that must be protected and secured.<\/p><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Lightweight Directory Access Protocol<\/h3>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/blog\/what-is-ldap-authentication\">LDAP<\/a> is an open source and cross-platform protocol that provides AD authentication services. There are two options associated with LDAP-based authentication in AD:<\/p>\n\n\n\n<ul>\n<li><strong>Simple authentication.<\/strong> In simple authentication, LDAP relies on login credentials to create a request to the server. It also supports anonymous and unauthenticated requests to corporate resources.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p><strong>Simple authentication and security layer (SASL).<\/strong> The SASL approach uses other authentication services such as Kerberos to connect to the LDAP server. IT teams can use this method to enhance security because it separates authentication methods from application protocols.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading3\"><strong>Authenticating Linux Devices Through Active Directory<\/strong><\/h2>\n\n\n\n<p>AD works seamlessly with Windows-based systems and services. While Windows may have dominated the OS market share in the 1990s, the same is not true today. Linux and macOS are now integral components in any IT infrastructure. As companies continue to leverage different OSs, the pressure to provide centralized access management becomes real.&nbsp;<\/p>\n\n\n\n<p>There are two primary methods you can leverage to <a href=\"https:\/\/jumpcloud.com\/blog\/active-directory-linux\">connect Linux-based devices to AD<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">LDAP<\/h3>\n\n\n\n<p>This approach requires IT teams to reconfigure Linux-based devices to leverage LDAP\u2019s pluggable authentication module (PAM). Since AD authentication largely focuses on the Kerberos protocol, IT teams must manually manage the entire authentication process.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Samba<\/h3>\n\n\n\n<p>This is a standard Windows interoperability tool for Linux systems. IT teams can use Samba as an intermediary to support AD authentication in Linux machines. For example, IT teams can use the service to create domains, set up a shared print server, and configure PAM to allow users to authenticate to locally installed services.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Note:<\/strong> Microsoft has also introduced the Windows Subsystem for Linux (WSL) to improve interoperability and developer productivity.<\/p><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading4\"><strong>Authenticating Macs Through Active Directory<\/strong><\/h2>\n\n\n\n<p>IT teams can use an LDAP and AD connector to configure Macs to access basic account details in <a href=\"https:\/\/jumpcloud.com\/blog\/ad-ds\">AD DS (Active Directory Domain Services)<\/a> infrastructures. These tools allow IT teams to leverage AD authentication to allow users to access corporate resources from their Macs when deployed. AD connector can also provide federated SSO by mapping AD identities to macOS identity and access management (IAM) roles.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Note:<\/strong> Microsoft\u2019s preferred method is cloud device and identity management.<\/p><\/div><\/div><\/div>\n\n\n\n<p>For example, the AD connector can generate all the attributes needed to <a href=\"https:\/\/jumpcloud.com\/blog\/best-practices-integrating-macs-active-directory\">authenticate macOS devices to AD infrastructure<\/a>. However, machines with macOS 10.12 or later cannot join an AD domain without domain services of at least Windows Server 2008. To use AD on such devices, IT teams must enable weak cryptography, which jeopardizes the organization\u2019s security.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"heading5\"><strong>Shortcomings of Active Directory Authentication<\/strong><\/h2>\n\n\n\n<p>In the 1990s and early 2000s, most device management tools and systems were largely driven by on-prem Windows OSs, and AD authentication worked well with such IT environments. However, today\u2019s OS landscape has increasingly become heterogeneous, with Linux and macOS platforms emerging on the scene as well as cloud-based infrastructure.&nbsp;<\/p>\n\n\n\n<p>Consequently, providing access controls and management in a <a href=\"https:\/\/jumpcloud.com\/blog\/why-centralized-user-management-is-important\">heterogeneous IT environment<\/a> has become a headache for IT teams in organizations. While legacy AD authentication can address IAM, it is far from efficient. In most cases, IT teams have been forced to use LDAP to authenticate Linux and macOS devices to AD, which creates an added layer to integrate and manage.<\/p>\n\n\n\n<p>Essentially, organizations end up with multiple \u201cmini directories\u201d rather than one centralized and authoritative directory platform to offer authentication and authorization services. Besides heterogeneous OSs, the adoption rate for software-as-a-service (SaaS) applications and other cloud-based services has been dramatic in recent years.<\/p>\n\n\n\n<p>This adoption comes with its own fair share of challenges in the IAM landscape. For example, most SaaS applications tend to be siloed, which complicates their management from an authorization perspective. Also, onboarding users in a SaaS-first environment is time-consuming and tedious because it involves users across multiple departments.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Leverage JumpCloud Directory to Extend Active Directory Authentication in Heterogeneous IT Environments<\/strong><\/h2>\n\n\n\n<p>JumpCloud\u2019s Open Directory Platform provides a smooth path to migrate off or modernize AD, once you\u2019ve succeeded in aligning IT\u2019s and management\u2019s interests. <a href=\"https:\/\/jumpcloud.com\/blog\/active-directory-integration\">Active Directory Integration<\/a> (ADI) has configuration options that will enable you to determine where and how you want to manage users, groups, and passwords. It also provides a migration tool to <a href=\"https:\/\/jumpcloud.com\/blog\/automate-active-directory-migration-tool\">transfer identities<\/a>.<\/p>\n\n\n\n<p>Cross-OS device management is a critical component to control and protect modern IT infrastructures. JumpCloud pairs the ability to manage every endpoint with an <a href=\"https:\/\/jumpcloud.com\/platform\/cloud-directory\" target=\"_blank\" rel=\"noreferrer noopener\">open directory platform<\/a> to secure every identity and resource. This unified approach delivers strong access control while consolidating your tools for increased IT operational efficiency.<\/p>\n\n\n\n<p><a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\">Try JumpCloud for free<\/a> and find out if it\u2019s the right option for your organization\u2019s journey away from AD.<\/p>\n\n\n\n<p>Our customers tell us that <a href=\"https:\/\/jumpcloud.com\/blog\/shadow-it\">asset management<\/a> is also important for security and IT operations. <a href=\"https:\/\/jumpcloud.com\/blog\/jumpcloud-acquires-resmo-for-integrated-asset-management\">JumpCloud is enhancing its platform<\/a> to unify SaaS, IT security, and asset management.<\/p>\n\n\n\n<p>Learn more about how admins will be able to consolidate security, asset, device, access, and identity management with JumpCloud and how those features go hand in hand.<\/p>\n\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/02\/Remote-work-ready-aspect-ratio-160x110-2.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            Get Rid of your Domain Controller        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            See why a domainless approach to IT can help you modernize your environment.        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/resources\/domainless-enterprise-roadmap\" data-promo=\"Go Domainless\" class=\"button is-primary-green promo-small-banner-link\">Read More<\/a>\n    <\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.<\/p>\n","protected":false},"author":150,"featured_media":46935,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2781],"tags":[],"collection":[2777],"platform":[],"funnel_stage":[3015],"coauthors":[2535],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>A Complete Guide to Active Directory Authentication - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Complete Guide to Active Directory Authentication\" \/>\n<meta property=\"og:description\" content=\"Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-10T15:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-15T00:41:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"585\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\"},\"author\":{\"name\":\"David Worthington\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\"},\"headline\":\"A Complete Guide to Active Directory Authentication\",\"datePublished\":\"2022-05-10T15:00:00+00:00\",\"dateModified\":\"2024-11-15T00:41:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\"},\"wordCount\":1557,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg\",\"articleSection\":[\"How-To\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\",\"url\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\",\"name\":\"A Complete Guide to Active Directory Authentication - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg\",\"datePublished\":\"2022-05-10T15:00:00+00:00\",\"dateModified\":\"2024-11-15T00:41:59+00:00\",\"description\":\"Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg\",\"width\":780,\"height\":585,\"caption\":\"Teal lock closing two light blue doors together\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Complete Guide to Active Directory Authentication\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\",\"name\":\"David Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"caption\":\"David Worthington\"},\"description\":\"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"david.worthington@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"A Complete Guide to Active Directory Authentication - JumpCloud","description":"Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication","og_locale":"en_US","og_type":"article","og_title":"A Complete Guide to Active Directory Authentication","og_description":"Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.","og_url":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication","og_site_name":"JumpCloud","article_published_time":"2022-05-10T15:00:00+00:00","article_modified_time":"2024-11-15T00:41:59+00:00","og_image":[{"width":780,"height":585,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg","type":"image\/jpeg"}],"author":"David Worthington","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Worthington","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication"},"author":{"name":"David Worthington","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e"},"headline":"A Complete Guide to Active Directory Authentication","datePublished":"2022-05-10T15:00:00+00:00","dateModified":"2024-11-15T00:41:59+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication"},"wordCount":1557,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg","articleSection":["How-To"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication","url":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication","name":"A Complete Guide to Active Directory Authentication - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg","datePublished":"2022-05-10T15:00:00+00:00","dateModified":"2024-11-15T00:41:59+00:00","description":"Learn about Active Directory Authentication, how it works, and how to obtain more controlled security in heterogeneous IT environments.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/active-directory-authentication"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/05\/it-security-multi-factor-authentication.jpg","width":780,"height":585,"caption":"Teal lock closing two light blue doors together"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/active-directory-authentication#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"A Complete Guide to Active Directory Authentication"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e","name":"David Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411","url":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","caption":"David Worthington"},"description":"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.","sameAs":["https:\/\/jumpcloud.com\/blog","david.worthington@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/62624"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/150"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=62624"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/62624\/revisions"}],"predecessor-version":[{"id":117622,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/62624\/revisions\/117622"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/46935"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=62624"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=62624"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=62624"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=62624"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=62624"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=62624"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=62624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}