Active Directory
Active Directory is a directory service developed by Microsoft for managing users, computers, and resources in Windows domain networks.
Timeline (last 90 days)
The three Kerberos delegation mechanisms differ in their configuration attributes in AD, such as the userAccountControl flag, msDS-AllowedToDelegateTo, and msDS-AllowedToActOnBehalfOfOtherIdentity.
Single Source of Truth is a core principle in IAM, meaning that all user identity data is based on one authoritative system, with common implementation vehicles including Active Directory, LDAP, Okta, and Azure AD.
The example in the demo is a stock trading simulator, including a web frontend, a backend written in another language, a message pipeline, and a conversational agent; identity uses Keycloak, and it can also be changed to Entra or federated with on-premises Active Directory.
Active Directory Federation Services (AD FS) is a federated identity service provided by Microsoft with Windows Server, allowing enterprises to expose internal Active Directory accounts to external SaaS applications via the SAML protocol.
In the Microsoft ecosystem, Active Directory domain controllers, Exchange mail systems, SharePoint collaboration platforms, and Office suites form a tightly coupled technology stack.
Traditional IAM architecture has gone through three stages: the directory services era (1990s–2000s), the federated identity era (2000s–2010s), and the cloud-native identity era (2010 to present).
Active Directory is a proprietary directory service implementation developed by Microsoft based on the LDAP protocol.
Kerberos was developed by MIT, employs a ticket mechanism with mutual authentication, and is the default authentication method in Active Directory environments.
All Facts (8)
The three Kerberos delegation mechanisms differ in their configuration attributes in AD, such as the userAccountControl flag, msDS-AllowedToDelegateTo, and msDS-AllowedToActOnBehalfOfOtherIdentity.
50%UnverifiedSingle Source of Truth is a core principle in IAM, meaning that all user identity data is based on one authoritative system, with common implementation vehicles including Active Directory, LDAP, Okta, and Azure AD.
50%UnverifiedThe example in the demo is a stock trading simulator, including a web frontend, a backend written in another language, a message pipeline, and a conversational agent; identity uses Keycloak, and it can also be changed to Entra or federated with on-premises Active Directory.
50%UnverifiedActive Directory Federation Services (AD FS) is a federated identity service provided by Microsoft with Windows Server, allowing enterprises to expose internal Active Directory accounts to external SaaS applications via the SAML protocol.
50%UnverifiedIn the Microsoft ecosystem, Active Directory domain controllers, Exchange mail systems, SharePoint collaboration platforms, and Office suites form a tightly coupled technology stack.
50%UnverifiedTraditional IAM architecture has gone through three stages: the directory services era (1990s–2000s), the federated identity era (2000s–2010s), and the cloud-native identity era (2010 to present).
50%UnverifiedActive Directory is a proprietary directory service implementation developed by Microsoft based on the LDAP protocol.
50%UnverifiedKerberos was developed by MIT, employs a ticket mechanism with mutual authentication, and is the default authentication method in Active Directory environments.
50%