Identity management over hybrid cloud environments
One of the first things to decide on, before using the hybrid cloud, is identity management. Organizations would like to keep their existing identity provider, have a single identity for each of their end users (while preserving existing credentials), and still be able to access resources in the cloud.
Identity management in hybrid cloud environments can be split into the following areas:
- Directory replication: Extending the on-premises directory into the cloud with either one-way replication or synchronization between the two.
- Federated authentication: An on-premises component brokers the user authentication to the cloud using SAML, OIDC, or some other protocol.
Some of the benefits of using centralized identity management are as follows:
- A single place to provision or de-provision identities
- Reusing strong credentials and authentication capabilities
- Centralization of access audits
- Avoid supporting...
