{"id":73286,"date":"2023-11-10T14:58:33","date_gmt":"2023-11-10T06:58:33","guid":{"rendered":"https:\/\/version-2.com\/?p=73286"},"modified":"2023-11-01T17:40:05","modified_gmt":"2023-11-01T09:40:05","slug":"what-is-active-directory-integration-adi","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2023\/11\/what-is-active-directory-integration-adi\/","title":{"rendered":"What is Active Directory Integration (ADI)?"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Active Directory (AD) was introduced two decades ago to provide centralized user and rights management as well as Windows PC configurations for private networks behind firewalls. Email was the first factor to upend that model for access control, and was followed by the proliferation of cloud services and devices that transformed networks into a digital estate.<\/p>

The perimeter model that AD supported worked well, until it didn\u2019t. Its shortcomings helped lay the groundwork<\/a> for the Zero Trust<\/a> approach to identity and access management (IAM). Zero Trust brings access control (the perimeter) closer to identities and devices by enforcing explicit trust before granting access to resources.<\/p>

JumpCloud\u2019s open directory platform makes it possible to modernize AD for Zero Trust. It works by combining cloud IAM with universal endpoint management (UEM) and other essential services to manage today\u2019s IT infrastructures, which are a hybrid of everything, everywhere. JumpCloud\u2019s Active Directory Integration<\/a> (ADI) feature integrates AD with the open directory.<\/p>

ADI makes it possible for multi-domain environments to extend AD environments to the cloud without locking small to medium-sized enterprises (SMEs) into a suite of vertically integrated tools. That approach to AD modernization can limit freedom of choice and distract from your overall mission by making IT management significantly more difficult. This article provides an overview of what ADI is and how it works to help SMEs reestablish the strong access control that was lost when AD\u2019s network perimeter model failed to meet today\u2019s IT infrastructure needs.<\/p>

<\/p><\/div>

Note:<\/strong> JumpCloud helps you follow Microsoft\u2019s Zero Trust Rapid Modernization Plan (RaMP) for a privileged access strategy to secure AD.<\/p><\/div><\/div><\/div>

AD Integration Deployment Models<\/h2>
\"AD<\/figure>

ADI continuously syncs users, groups, and passwords between AD and JumpCloud. Its components are installed on a member server and configured to import and sync identities for each domain. It provides several options for authentication flows: bi-directional syncing and one-way syncing (in either direction). Pass-through authentication back to AD is supported to uphold security and compliance requirements for local authentication and authorization.<\/p>

<\/p><\/div>

Note:<\/strong> Microsoft\u2019s Entra ID cloud directory will not synchronize groups unless the subscription is a Premium SKU.<\/p><\/div><\/div><\/div>

Bi-Directional Synchronization<\/h3>
\"JumpCloud<\/figure>

Bi-directionality means that password changes that occur on the integrated platform get synchronized and changed in AD. This makes it possible for friction-free user access with single-sign on (SSO). It also enables advanced identity lifecycle management. For example, you can use JumpCloud to sync human resources systems<\/a> with JumpCloud and back to AD.<\/p>

AD integrations are often one-way, where AD is the source of truth and a third-party application or IT resource authenticates user access against AD. Resources such as web applications require SSO in order to meet modern security and usability requirements. A cloud directory provides SSO with the added benefit of multi-factor authentication<\/a> (MFA) and conditional access<\/a> to enable a Zero Trust<\/a> security strategy that \u201cassumes breach\u201d and verifies requests.<\/p>

This approach modernizes AD to extend access control to every device and resource without requiring admins to perform consolidation, migration, or deep integrations with multiple point solutions. Admins can manage users, groups, and access in either AD or JumpCloud.<\/p>

There\u2019s also an available migration path to JumpCloud, if and when it makes sense to leave AD.<\/p>

<\/p><\/div>

Note:<\/strong> Microsoft requires its customers that modernize AD using Entra ID to purchase premium subscriptions for password write-back.<\/p><\/div><\/div><\/div>

Pass-Through Authentication<\/h3>
\"synchronization\"<\/figure>

Some sectors are required to retain oversight of their credential store for certainty and compliance. JumpCloud\u2019s open directory can federate authentication AD through ADI, which extends AD to other resources and devices without running afoul of those rules.<\/p>

<\/p><\/div>

Note:<\/strong> Outbound authentication flows from AD to JumpCloud enable AD users to access cloud resources and non-Windows devices.<\/p><\/div><\/div><\/div>

Modernizing AD with JumpCloud<\/h2>

JumpCloud is modern, user-friendly, and makes it possible for admins to manage SSO and UEM from a single console with minimal effort. It also extends SSO to common network protocols, adding convenience, while reducing the risk of unauthorized access to infrastructure. A Zero Trust IAM strategy complements your existing investment in network perimeter security.<\/p>

A crucial part of reestablishing access control over your digital estate comes from the ability to integrate AD with non-Windows systems.<\/p>

\"modernize<\/figure>

Universal Endpoint Management<\/h3>

JumpCloud\u2019s UEM adds the ability to integrate Android, macOS, and Linux devices into Active Directory-controlled environments with mobile device management (MDM) support for Windows. Untrusted endpoints can become a weak link in a Zero Trust strategy; UEM ensures that there\u2019s a baseline of policies and patch management<\/a> (optional) to reduce your attack surface.<\/p>

End users don\u2019t have to jump through hoops to stay compliant with password policies, password resets, and other critical functions. And, they can do this from anywhere \u2014 with no VPN. Built-in remote assist<\/a> is available to support your users with both attended and unattended sessions.<\/p>

<\/p><\/div>

Note:<\/strong><\/p>

Agents provide telemetry and reporting<\/a> on device and user activity.<\/p><\/div><\/div><\/div><\/div>

SSO and Modern Authentication\u00a0<\/h3>

ADI synced identities connect through SSO to networking infrastructure with RADIUS, cloud infrastructure and web apps with OIDC and SAML, file servers on-prem and in the cloud, legacy applications via LDAP, and more by using JumpCloud\u2019s RESTful API.<\/p>

<\/p><\/div>

Note:<\/strong><\/p>

JumpCloud offers an integrated password manager<\/a> for when SSO isn\u2019t possible.<\/p><\/div><\/div><\/div><\/div>

The platform also includes JumpCloud Go\u2122<\/a>, a hardware-protected and phishing-resistant passwordless login for JumpCloud managed devices. It provides modern authentication that\u2019s more secure and simpler and safer for your users. JumpCloud Go is supported on MacOS and Windows and integrates with device biometric authenticators (Apple Touch ID or Windows Hello) to satisfy traditional password sign-in challenges. It will provide high MFA authenticator assurance.<\/p>

\"JumpCloud
Modern authentication helps to harden AD against the latest security threats.<\/figcaption><\/figure>

Adopting SSO and UEM is recommended for all organizations that use AD, per Microsoft\u2019s Cybersecurity Reference Architectures (MCRA). JumpCloud provides SMEs with an alternative to Microsoft\u2019s prescribed path by keeping your identity provider (IdP) and IT stack independent. JumpCloud has essential IAM, UEM, and system management capabilities in a single place.<\/p>

Try JumpCloud ADI<\/h2>

Still wondering what Active Directory Integration is and how it can modernize AD? See for yourself when you sign up for a free trial of JumpCloud<\/a>. It\u2019s included with the open directory platform at no additional charge. JumpCloud has professional service options to assist with onboarding users. JumpCloud is also a Google partner<\/a> and integrates with Google Workspace, making both services better together with a modern IT management and productivity package.<\/p>