you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 6 months ago (1 child)

There is one last major bit once you have RMM and EDR in place - centralized identify. Until Okta, Ping, Azure, and Google all have a pam module that allows for remote identity management without depending on LDAP, enterprise endpoints are restricted to desktop/server machines (or orgs where you can get a waiver and only have local login).

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 6 months ago* (1 child)

    Yep but...

    Here's Microsoft - https://learn.microsoft.com/en-us/entra/identity/devices/sso-linux?tabs=debian-install%2Cdebian-update%2Cdebian-uninstall

    Google has a variety of IDM methods including Ubuntu Authd and Secure Cloud LDAP. There's also 3rd party tools like JumpCloud, ScaleOrange, etc.

    Okta appears to have ASA and OPA although I'm not familiar with either of them. Ping has PingID and Ping Federate, although again I haven't used either of them.

    So depending on your cloud and needs the IdM / IAM is either available NOW or it will be very soon. 😀

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 6 months ago (1 child)

    Ohh that's super exciting. I haven't realized Microsoft made one.

    Okta's offering was garbage last I attempted to poke it. And 3rd party IAM tooling can be completely hit or miss (and let's not even start about LDAP over the web...)

  • source
  • parent
  • hideshow 2 child comments