{"id":6528,"date":"2017-05-15T15:00:36","date_gmt":"2017-05-15T21:00:36","guid":{"rendered":"https:\/\/www.jumpcloud.com\/blog\/?p=6528"},"modified":"2024-11-14T17:12:49","modified_gmt":"2024-11-14T22:12:49","slug":"desktop-authentication","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/desktop-authentication","title":{"rendered":"Desktop Authentication"},"content":{"rendered":"\n

With the move to the cloud, and a number of web single sign-on platforms getting a great deal of attention, it\u2019s easy to understand why desktop authentication isn\u2019t \u201csexy\u201d anymore. In many organizations, it actually seems like it\u2019s a forgotten activity. IT organizations are often prioritizing <\/span>Identity-as-a-Service (IDaaS)<\/span><\/a> over directory services, which ends up being the control point for desktop authorization.<\/span><\/p>\n\n\n\n

If we step back and look at history, it\u2019s a little easier to understand where the market is headed. <\/span><\/p>\n\n\n\n\n

\n
\n \"JumpCloud\"\n <\/div>\n
\n

\n Enable Secure Hybrid Work Anywhere, Anytime <\/p>\n

\n Identity, access, and device management from a single cloud-based console <\/p>\n <\/div>\n

\n Learn More<\/a>\n <\/div>\n<\/div>\n\n\n\n\n

Authentication through Active Directory\u00ae<\/span><\/h2>\n\n\n
\n
\"Microsoft<\/figure><\/div>\n\n\n

Back when the client \/ server era was in full swing and the Internet was emerging as a major, transformational platform, Microsoft brilliantly introduced an identity management solution called <\/span>Active Directory<\/span><\/a>. AD would go on to be the monopoly in the Identity and Access Management (IAM) space and virtually rule the desktop authentication category. <\/span><\/p>\n\n\n\n

This directory, though innovative at the time, wasn\u2019t that hard of a problem for Microsoft to solve as most IT networks were homogeneous Windows-based IT environments. Controlling the desktop environment was fairly straight forward for IT admins in this era.<\/span><\/p>\n\n\n\n

The result was that Active Directory became entrenched in IT environments, both small and large. In fact, nobody in the identity management space even thought much about desktop authentication or directory services due to how established AD was. However, that all changed when Internet really began to take off. <\/span><\/p>\n\n\n\n

More and more organizations began leveraging <\/span>cloud software and infrastructure<\/span><\/a>. Everybody\u2019s attention turned external, away from on-premise infrastructure. IT admins were still using Active Directory, but they began looking to single sign-on solutions to solve arising access and authentication needs. Their core directory services were still taken care of by AD, but they needed to build on top of it in order to manage their cloud-based resources. Initially, most IT departments addressed this by supplementing the on-prem identity provider with a <\/span>first generation IDaaS <\/span><\/a>solution.<\/span><\/p>\n\n\n\n

Managing Windows, Mac, and Linux<\/span><\/h2>\n\n\n\n

While IT and DevOps engineers were focused externally on the cloud, there was a transformation going on internally too. Windows machines were being replaced by Mac and Linux devices. In fact, Microsoft Windows went from being 9 out of 10 devices used, to being one of out of five (<\/span>Forbes.com<\/span><\/a>). That\u2019s a massive change. End users were switching to platforms that were easier for them and BYOD programs were letting them do it. What used to be simple control over desktop authentication with Windows, started to become a complex task with a variety of operating systems.<\/span><\/p>\n\n\n\n

As IT admins know, <\/span>Microsoft optimized Active Directory to work with Windows<\/span><\/a>. So, all of the new BYOD Mac and Linux machines were considered second-class citizens. This left a large portion of the users unmanaged, and as a result not secured. Having computers with unmanaged entrances to your enterprise\u2019s network is a serious risk. Desktop security is as critical as ever. It is the conduit to an organization\u2019s digital assets, whether they are on-prem or in the cloud. Securing and controlling that platform is vital to ensuring company information is not accessed by the wrong people.<\/span><\/p>\n\n\n\n

Directory-as-a-Service Works Across Major Systems<\/span><\/h2>\n\n\n
\n
\"jumpcoud<\/figure><\/div>\n\n\n

With the massive changes in the IT landscape, a new generation of cloud identity management platform needed to emerge to solve the issue of cross platform desktop authorization. To solve this issue, <\/span>Directory-as-a-Service\u00ae <\/span><\/a>(DaaS) stepped up. DaaS securely manages and controls user access to IT systems, applications, and networks. <\/span><\/p>\n\n\n\n

With one unified cloud directory service, IT organizations can control desktop authentication to Windows, Mac, and Linux devices. IT can, with the same cloud identity provider, support LDAP authentication, <\/span>cloud RADIUS<\/span><\/a>, system management on all three platforms, <\/span>multi-factor authentication<\/span><\/a>, single sign-on to <\/span>web and on-prem applications<\/span><\/a>, and more. Directory-as-a-Service is the modern adaptation of LDAP and Active Directory for the cloud era.<\/span><\/p>\n\n\n\n

Desktop Authentication in a Mixed Platform Environment<\/span><\/h2>\n\n\n\n
\n