SSO Authentication

HannaH021 1 Reputation point
2021-07-30T07:10:03.15+00:00

Hi All

I'm designing a solution that has a PaaS management service, which receives data from linux/windows VM servers in Azure. These servers are domain joined using ADDS. I don't have ADFS in the mix, and ADDS and Azure AD are not federated.

The ask: I'd like my users to have the same identity (username and password) as that in the ADDS.

What would be the most appropriate way to authenticate users against the PaaS management service? Using Azure AD and then establish federation with ADDS?

Any better thoughts?

Thanks

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,186 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,380 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Justaone555 6 Reputation points
    2021-07-30T08:59:52.043+00:00

    Hey,

    I would like to clarify that i understood you correctly,
    You have an on-premises AD which has all your users and the servers which are deployed in Azure.
    and you would like the users from the on-premises to authenticate to Azure AD with the same credentials, and have access to the PaaS service?

    0 comments
  2. HannaH021 1 Reputation point
    2021-07-30T10:43:29.503+00:00

    @Justaone555 , thanks

    We have Active directory domain services installed on a server within the Azure network... this allows our users to connect to VMs using domain accounts.

    We want to allow our users to use the same credentials for the PaaS service on the internet.

    I think we have two options

    1. Either we have an ADFS service that authenticates users using their domain credentials, and configure the PaaS service to use that ADFS server
    2. We establish federation between Azure AD and ADDS and allow them to authenticate against the Azure AD service.

    Are there any other options? Or are these options not valid? Or is there a preference?

    Thanks