01.10.2017 - Navigating a Multi-Forest Office 365 Migration Without Losing Your Mind

A logistics management business wants to consolidate its multi-tenant, multi-forest Office 365 environment. Expansion via acquisitions created a multi-tenant, multi-forest problem for the logistics company further complicated by additional challenges involving business productivity, managing users in AD and development of cross-forest trust. They also wanted SSO to reinforce secure access to applications and decrease time used by IT to manage end-user requests for password reset within their business. So what do you do? Decide to take the plunge and enter the crazy world of multi-forest sharepoint Catch-22s, or pull your hair out strand by strand to numb your brain and avoid dealing with it? For starters, you should know Microsoft does support different scenarios for implementing SSO. Two components needed are DirSync (directory synchronization) between the Azure AD detail used for the subscription to Office 365 and user credential authentication to the IdP. DirSync is the essential identity accessory while user credential authorization is the sharepoint federation aspect of a multi-forest Office 365 situation. But wait, there’s more… Because Microsoft does support user password synchronization — AKA “password hashes” — between Azure AD and your on-site Active Directory System, you don’t need to worry about federation because Azure AD represents the user authentication point. On-site AD systems act as the de facto system for user accounts and are not used to authenticate users of Office 365. This is a generally the preferred scenario of small- to mid-level companies that want to avoid managing a federation infrastructure with password hash synchronization. ...

Filed under: Blog · Tags: , ,
Read More

SORT BY

Tags

  • The database in which all of your organization’s sensitive identity data is stored.
  • A digital ledger in which digital transactions are recorded chronologically and publicly.
  • Securely managing customer identity and profile data, and controlling customer access to applications and services.
  • The means of linking a person's electronic identity and attributes, stored across multiple distinct identity management systems.
  • A legal framework that sets guidelines for the collection and processing of personal information of individuals within the EU.
  • The policy-based centralized orchestration of user identity management and access control.
  • An authentication infrastructure that is built, hosted and managed by a third-party service provider.
  • A security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity for a login or other transaction.
  • A global provider of innovative and affordable identity access management solutions. 
  • Managing and auditing account and data access by privileged users.
  • Tools and technologies for controlling user access to critical information within an organization.
  • An authentication process that allows a user to access multiple applications with one set of login credentials.

Archive

...