{"id":16459,"date":"2018-07-03T08:00:46","date_gmt":"2018-07-03T14:00:46","guid":{"rendered":"https:\/\/www.jumpcloud.com\/?p=16459"},"modified":"2024-11-14T17:53:44","modified_gmt":"2024-11-14T22:53:44","slug":"open-source-azure-active-directory","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/open-source-azure-active-directory","title":{"rendered":"Is There an Open Source Azure Active Directory?"},"content":{"rendered":"\n
As the IT world continues to <\/span>migrate to the cloud<\/span><\/a>, Microsoft\u00ae<\/sup> continues to push Azure Active Directory as their platform of choice. But as many IT admins know, Azure AD just isn\u2019t a viable replacement for on-prem Active Directory. The result is that IT organizations are left asking, \u201cIs there an open source <\/span>Azure Active Directory alternative<\/span><\/a>?\u201d Let\u2019s briefly explore the question together. <\/span><\/p>\n\n\n\n <\/span><\/p>\n\n\n\n In a sense, IT admins are looking for an OpenStack<\/span>\u00ae<\/sup><\/span>-like alternative to <\/span>AWS<\/span>\u00ae<\/sup><\/span><\/a> or other IaaS platforms. Released in 2010, <\/span>OpenStack<\/span><\/a> is essentially \u201ca free and open-source software platform for cloud computing\u201d from which virtual resources can be used. OpenStack has achieved some success as a software platform, but its results are instructive as IT organizations consider the use of an open source directory services platform. <\/span><\/p>\n\n\n\n Unfortunately, an open source replacement for Azure Active Directory just isn\u2019t available. There are, of course, a number of on-prem open source directory services and identity providers delivered as software. Some examples include OpenLDAP<\/span>\u2122<\/span>, Samba<\/span>TM<\/span>, and FreeIPA. All three of these open source authentication platforms are useful and can benefit organizations, but they aren\u2019t going to end up being a replacement to Azure AD.<\/span><\/p>\n\n\n\n Outside of the obvious difference between Azure AD and other open source identity providers (Azure AD is certainly proprietary), the challenge with these open source directory services solutions is that, ultimately, they inhibit IT organizations from being able to authenticate to a wide range of IT resources. Each of the open source identity providers is greatly positioned to cater to a specific slice of the market, intentionally limiting the breadth of their functionality to do so. In the case of OpenLDAP, for instance, the LDAP protocol is the primary path. FreeIPA, on the other hand, adds in the Kerberos\u00ae<\/sup> protocol. Samba does this a well, but can also act as more of a domain controller in the process. None of these platforms deeply integrates with systems to provide Microsoft Active Directory (MAD) controls.<\/span><\/p>\n\n\n\n The end result is that organizations that are leveraging modern IT solutions, such as G SuiteTM, AWS, <\/span>Mac\u00ae<\/sup> and Linux\u00ae<\/sup> systems<\/span><\/a>, cloud storage, NAS appliances\/<\/span>Samba file servers<\/span><\/a>, and much more, will struggle with Azure AD, as well as its on-prem open source alternatives. By Microsoft\u2019s design, they\u2019re simply not built to work together. While this doesn\u2019t seem all that practical in the modern world, it\u2019s the reality for heterogenous organizations now looking elsewhere to optimize their identity management infrastructure for open source, on-prem, or virtual resources. <\/span><\/p>\n\n\n\n\nSearching for an Open Source Azure Active Directory<\/span><\/h2>\n\n\n
<\/figure><\/div>\n\n\n
Open Source Challenges in the Modern Era<\/span><\/h2>\n\n\n\n