By Megan Anderson Posted December 22, 2019
We all want to get every bit out of what we pay for. Resourcefulness is one of humanity’s claims to success, after all. IT organizations are no different when it comes to their tech stack, often with Microsoft® Active Directory® (AD) at the core.
Although it has served as a central resource in the industry for decades, admins are now finding they have to dig deeper into their budgets to support AD. To get more out of AD without emptying your pockets, restructure how you think of a directory service and what it can do for you.
Active Directory’s Diminishing Returns
Active Directory was once fundamental to managing all of an organization’s identity management needs, but in the age of cloud computing, remote and contract employees, bring-your-own-device (BYOD) policies, and more sophisticated cyberattacks, IT organizations are starting to outgrow AD’s functionality. Admins often must patch over their directory’s missing coverage with third-party tools. These “add-ons” help to reconstruct AD in a way that better suits the modern world, but the costs associated with them add up.
For example, AD will connect on-prem users to on-prem applications, but not those in the cloud. Admins then may buy a single sign-on (SSO) tool that connects users to web applications, but then there’s more siloed identities to manage with limited coverage from AD.
Remote users (or those who work remotely part-time) require access to on-prem resources as well, but in order to grant it to them, they need to implement for VPNs. Then there’s the matter of managing macOS® or Linux® devices outside of AD, requiring another supplemental tool.
Each add-on comes at a cost, both monetarily and implementation-wise. Some are harder to install than others, taking away time and energy from other projects. Attaching add-on after add-on leads to diminishing returns. The amount an organization pays for their overpatched AD instance quickly exceeds their gains.
Now we’re brought back to our original goal: to get more out of AD. Instead of a chain of add-ons serving AD more than (Read more...)
*** This is a Security Bloggers Network syndicated blog from Blog – JumpCloud authored by Megan Anderson. Read the original post at: https://jumpcloud.com/blog/active-directory-budgeting