{"id":16791,"date":"2018-07-12T08:44:26","date_gmt":"2018-07-12T14:44:26","guid":{"rendered":"https:\/\/www.jumpcloud.com\/?page_id=16791"},"modified":"2021-09-21T13:16:38","modified_gmt":"2021-09-21T17:16:38","slug":"why-move-to-cloud-directory-services","status":"publish","type":"resource","link":"https:\/\/jumpcloud.com\/resources\/why-move-to-cloud-directory-services","title":{"rendered":"Why Move to Cloud Directory Services"},"content":{"rendered":"\n

Perhaps the single most significant innovation for IT over the last decade or two is the cloud.<\/em><\/strong><\/h2>\n\n\n\n

As every IT organization thinks about how to leverage cloud infrastructure, there is a significant analysis and transformation that needs to happen in regards to its approach.<\/p>\n\n\n\n

To truly leverage cloud technology, IT organizations need to think about their problems differently. While swapping an on-prem solution for a cloud version can be effective, it can be even more effective to challenge the fundamental underpinnings of a category. This approach is why IT admins are asking themselves, why move to cloud directory services?<\/p>\n\n\n\n

Directory Services\u2019 Early Days<\/strong><\/h2>\n\n\n\n

When Tim Howes and his colleagues at the University of Michigan created the authentication protocol,\u00a0LDAP<\/a>, little did they know that they kicked off the modern era of identity management. <\/p>\n\n\n\n

Before that, identity management was really a mixed bag of solutions and approaches. The concept of directory services then really solidified when Microsoft\u00a0introduced Active Directory\u00a0\u00a0(MAD or AD) in 1999. LDAP and Active Directory worked well in conjunction to provide an enterprise with what would become the quintessential identity management solution. <\/p>\n\n\n\n

Due to this, the concept of directory services has largely been driven by Microsoft.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Of course, this made a great deal of sense for a long time. Because Microsoft owned the desktop operating system with Windows\u00ae<\/sup>, it made it easier for them to control the IT management tools space as well. Active Directory<\/a> was foremost on this list, and has been, for almost two decades, the on-prem identity provider of necessity more than choice for an organization.<\/p>\n\n\n\n

So, it\u2019s no surprise that IT admins are reluctant to consider any Active Directory alternatives. In fact, Microsoft is looking to lock IT organizations in by creating a complementary solution called\u00a0Azure\u00a0Active Directory<\/a>.\u00a0<\/p>\n\n\n\n

Azure AD is an extension of the traditional on-prem Active Directory, but isn\u2019t actually a cloud-based AD replacement (Spiceworks<\/a>). In fact, Azure AD isn\u2019t really a cloud directory service, but rather a user management platform for Azure infrastructure and Office 365\u2122.<\/p>\n\n\n\n

Smart IT organizations are still asking the question, why move to cloud directory services? They know that on-prem Active Directory isn\u2019t a viable approach as the entire IT infrastructure shifts to the cloud. And, since Azure AD isn\u2019t a replacement to AD, there are compelling reasons to move from Microsoft-based solutions into the cloud. But what cloud directory solutions are available to replace Active Directory?<\/p>\n\n\n\n

Breaking Up with Active Directory<\/strong><\/h2>\n\n\n\n

Before we dive into the reasons why a move to a cloud directory makes a great deal of sense, we need to hit reset on what the IT environment looks like today. In the past, IT was virtually all Windows-based, but today\u2019s IT scene is dramatically different. With Mac\u00ae and Linux\u00ae<\/a> systems, web applications, cloud infrastructure, and WiFi networks, it\u2019s a far cry from the legacy AD days. These changes are rendering the on-prem identity provider obsolete and constraining IT organizations.<\/p>\n\n\n\n

\"Breaking<\/figure><\/div>\n\n\n\n

The modern approach to identity management\u2014the cloud directory\u2014is transformative for organizations by offering a vendor neutral, platform-agnostic approach. IT organizations are no longer reliant on a homogenous network to make their identity and access control program work. In fact, this ability to enable IT organizations to leverage whatever they want is a core reason why IT is shifting to a cloud directory along with cost, productivity, and security.<\/p>\n\n\n\n

Choice<\/strong><\/h3>\n\n\n\n

The legacy, on-prem identity provider virtually forced IT organizations into a homogenous network. End users weren\u2019t encouraged to use whatever was best for them, rather it was to leverage what would integrate with Active Directory, since that was a major control point of the network. With a cloud directory service, organizations are free to choose whatever IT solutions are best for them. <\/p>\n\n\n\n

For instance, according to\u00a0Upland<\/a>, a cloud directory service can provide authorization to \u201cany system, anywhere, at anytime with one password for each user.\u201d <\/p>\n\n\n\n

A cloud directory service is platform independent, multi-protocol, provider neutral, and location agnostic. In short, IT delivers choice to their organization and the organization can leverage whatever IT resources are best for them.<\/p>\n\n\n\n

\"illustration<\/figure><\/div>\n\n\n\n

Control<\/strong><\/h3>\n\n\n\n

As the IT landscape shifted to non-Windows IT resources, Active Directory, and by extension IT admins, lost control. More and more IT resources were outside of the purview of AD. <\/p>\n\n\n\n

Now, some organizations could leverage third party add-ons such as identity bridges,\u00a0web application SSO solutions<\/a>,\u00a0and privileged identity management platforms on top of AD to gain the control that they needed, but this approach left a fragmented, disparate infrastructure with high cost, and security holes. <\/p>\n\n\n\n

Before implementing their cloud directory service, for example,\u00a0Doublestruck<\/a>\u00a0was experiencing \u201cthe pain of having a bunch of systems all set up different ways for different users. Our end users were feeling that pain too.\u201d With a cloud directory service, however, they had a central point of control over virtually all users and IT resources. Cloud directory services allow IT admins to leverage one web-based console to control users and systems across the entire IT infrastructure.<\/p>\n\n\n\n

\"Connecting<\/figure><\/div>\n\n\n\n

Security<\/strong><\/h3>\n\n\n\n

There may not be a more important security issue than protecting identities. Building in security at the foundation of the identity management strategy for an organization is critical. Every identity should have security built in with strong password complexity requirements,\u00a0SSH keys for critical server access<\/a>,\u00a0multi-factor authentication to systems and applications, and more. <\/p>\n\n\n\n

A cloud directory service \u201cfilled that need right away\u201d for\u00a0UPPAbaby<\/a>\u00a0when they needed to improve their password complexity. UPPAbaby and other IT organizations can feel confident that they are stepping up their identity security game, thanks to a cloud directory supports that initiative.<\/p>\n\n\n\n

\"Legacy<\/figure><\/div>\n\n\n\n

Productivity<\/strong><\/h3>\n\n\n\n

Frictionless and frustration-free access is critical for end users today. More of their lives are spent with digital solutions trying to accomplish their tasks. Creating hurdles for these workers to access the IT resources they need is a hassle they simply don\u2019t want. Neither does IT, it turns out. <\/p>\n\n\n\n

Both end users and IT are searching for ways to make it easier to do their respective jobs, while also creating a safe, secure IT environment. A pain point where this is especially prevalent is onboarding, which can take up to a month at some companies. <\/p>\n\n\n\n

After leveraging a cloud directory service,\u00a0Tamr<\/a>\u00a0cut their onboarding time from multiple weeks to \u201cmaybe 15 minutes a week tops.\u201d This is only one such area where cloud directories improve productivity. A cloud directory is focused on creating one identity for each person that connects them to virtually whatever IT resources they need.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Cost<\/strong><\/h3>\n\n\n\n

An IT admin\u2019s identity management shopping list is one that costs a significant amount of money. Major expenses include on-prem hardware, software, hosting, security, backup, and load balancing. Of course, that doesn\u2019t even include the time that already busy IT admins are spending working on their on-prem identity management infrastructure. <\/p>\n\n\n\n

About their cloud directory service,\u00a0The Church Online<\/a>\u00a0said \u201cLooking forward, choosing [a cloud directory service] means that we won\u2019t need to hire as many IT staff members as we continue to grow. The value is immense because of the time it saves.\u201d By outsourcing directory services, IT admins can save money and, perhaps more importantly, time.<\/p>\n\n\n\n

\"Time<\/figure><\/div>\n\n\n\n

Why Move to Cloud Directory Services?<\/strong><\/h3>\n\n\n\n

As the IT landscape continues to transform, innovative approaches to existing tasks will emerge. It is critical that IT organizations delve deep and ask why before making the leap. In many instances, the shift may not make sense, but in some cases it can provide immediate gains. Please\u00a0contact us<\/a>\u00a0and let us know if we can talk you through why moving to a cloud directory service can be a game changer for your organization. <\/p>\n\n\n\n

\n