Does Company ‘X’ have an Azure Active Directory Tenant? • Hacker News Board

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#51

Post by technion » Sat, Oct 01, 2022, 2:44 PM UTC

kn8 wrote: post #26

What is Azure AD used for?

Well if you're familiar with Google Workspace.. you know once you've got email accounts in there then there's a whole lot of user admin you can do?

Azure AD is just Microsoft's version of that directory. The thing is if you use for example Exchange Online, or even just like Microsoft Office licensing, you've now got Azure AD where the users have accounts. Then I see businesses spend a fortune to integrate Okta or similar products that don't actually add anything given how feature full Azure AD is at this point.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#52

Post by bob1029 » Sat, Oct 01, 2022, 2:46 PM UTC

I know how we feel about the Microsoft Death Star consuming all in its path, but there are some upsides to statistics like this.

For instance, we are a B2B software vendor in the banking space, and we have to survive all kinds of audits regarding the nature of our code & vendors. By keeping nearly all of our 3rd party items under the Microsoft umbrella, we can automagically skip over vast chunks of our due diligence process (according to the mutual trust equation).

None of our customers is F500 (so far), but we have yet to encounter one who didn't already have AAD, or a willingness to set this up. From a product development perspective, we really prefer having a few known-good ways to do things. Authentication & authorization is one area that I strongly dislike having a large variety of flavors on. Especially considering the nature of our business and ever-increasing demands for complex MFA flows (e.g. SAML). There's been so many fly-by-night operations in this space, and our customers do not have patience for trying new things.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#53

Post by PaulWaldman » Sat, Oct 01, 2022, 2:46 PM UTC

Microsoft is traditionally great at bundling their products. This is reminiscent of bundling Internet Explorer with Windows.

Could an Okta have a claim against Microsoft similar to Netscape in the late 90's?

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#54

Post by jmathai » Sat, Oct 01, 2022, 2:46 PM UTC

mc32 wrote: post #17

arkitaip wrote: post #8

Earlier quoted context omitted.

Microsoft absolutely dominates corporate IT. Their Office 360 delivers to much values at a low cost that the corps suffer from mediocre MS products because it's all there through a single subscription.

Same for the Google options; except the Google options tend to make non-backward compatible changes and often only go 90% of the way to meet the competition in terms of features. Even their spam detection is not where postini had it years ago.

I worked in Google Workspace.

A CIO needs to see significant upside in choosing a non Microsoft solution to take the risk of not going with on-prem /cloud AD.

Very few enterprises, this is an understatement, use Workspace exclusively.

They need Active Directory Domain Services (on-prem AD) regardless and it is their source of truth (typically syncing to Workdpace for users/roles). The tooling and expertise is in AD. Azure AD will always have a better on-prem to cloud story than Workspace (or any competitor). Plus their licensing makes it a no brainer. It’s a very strong moat.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#55

Post by darkstar_16 » Sat, Oct 01, 2022, 2:47 PM UTC

ascar wrote: post #47

Why was that title editorialized as "around 83.4%"? 83.4% of 500 is exactly 417. The article is also exact about these numbers. No need to add "around". Edit: Why was the title editorialized to begin with? Edit2: looks like the title was updated to the original. Thanks.

Nit picking much, are we ?

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#56

Post by eastbound » Sat, Oct 01, 2022, 2:48 PM UTC

jmathai wrote: post #43

Eduard wrote: post #40

Earlier quoted context omitted.

Self-hosted Gitlab instances also can act as authentication services. Connecting git with an internal AD/LDAP allows for not requiring Azure AD.

This isn’t a solution for enterprises, however.

For juniors: Enterprises and even small startups need to comply with their industry’s security certification (PCI, ISO, whatever) which requires traceability of logins (and central revocation when employees quit and provably complex passwords and inability to retry 100 times, etc.)

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#57

Post by ascar » Sat, Oct 01, 2022, 2:48 PM UTC

graiz wrote: post #49

ascar wrote: post #47

Why was that title editorialized as "around 83.4%"? 83.4% of 500 is exactly 417. The article is also exact about these numbers. No need to add "around". Edit: Why was the title editorialized to begin with? Edit2: looks like the title was updated to the original. Thanks.

The article says that there may be other domains that it didn't catch because it wasn't the first result in google or the company has the server on a different domain, so it's likely a slight undercount.

So "at least" would still have been a more accurate wording.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#58

Post by [deleted] » Sat, Oct 01, 2022, 2:50 PM UTC

Retric wrote: post #50

ascar wrote: post #47

Why was that title editorialized as "around 83.4%"? 83.4% of 500 is exactly 417. The article is also exact about these numbers. No need to add "around". Edit: Why was the title editorialized to begin with? Edit2: looks like the title was updated to the original. Thanks.

That 417 is probably low. It’s hard to prove that nobody in a giant organization is using some tool, but conversely that undercuts the such statistics. If say 0.01% of Walmart’s employees are using X because of a recent acquisition then that’s hardly an endorsement of X by Walmart.

[deleted]

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#59

Post by guoqi » Sat, Oct 01, 2022, 2:50 PM UTC

pdimitar wrote: post #41

Eduard wrote: post #40

Earlier quoted context omitted.

Self-hosted Gitlab instances also can act as authentication services. Connecting git with an internal AD/LDAP allows for not requiring Azure AD.

I'd love to read more about it. Got any links?

Here has one related post: API Security with OIDC by using Apache APISIX and Microsoft Azure AD

https://dev.to/apisix/api-security-with-oidc-by-using-apache...

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#60

Post by ascar » Sat, Oct 01, 2022, 2:51 PM UTC

darkstar_16 wrote: post #55

ascar wrote: post #47

Why was that title editorialized as "around 83.4%"? 83.4% of 500 is exactly 417. The article is also exact about these numbers. No need to add "around". Edit: Why was the title editorialized to begin with? Edit2: looks like the title was updated to the original. Thanks.

Nit picking much, are we ?

HN Guidelines:

"If the title contains a gratuitous number or number + adjective, we'd appreciate it if you'd crop it. E.g. translate "10 Ways To Do X" to "How To Do X," and "14 Amazing Ys" to "Ys." Exception: when the number is meaningful, e.g. "The 5 Platonic Solids."

Otherwise please use the original title, unless it is misleading or linkbait; don't editorialize."

This is directly against the guidelines and how article titles should be submitted. Editorialization of titles is heavily discouraged and here it even says something the article doesn't. Not at all a nitpick imho.