No second password
Credentials stay in the directory. isidaten checks against it and stores no separate password for those accounts.
← All integrations
Identity & Sign-in Reads data
Active Directory / LDAP
Sign in with the account that already exists
Another password is the fastest route to poor adoption. So in isidaten, whoever can sign in to the directory can sign in here: authentication runs directly against Active Directory or an LDAP server. Users do not have to be created by hand; they come from the isidaten agent AD scan. And what someone is allowed to do is decided by group membership in the directory, which is maintained there anyway.
Vendor: Microsoft / OpenLDAP · learn.microsoft.com/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview
What is synchronized automatically
- Sign-in against AD/LDAP (LDAP bind)
- User accounts from the agent AD scan
- Roles from AD group memberships
Your benefits
Permissions follow the group
Whoever leaves an AD group loses the corresponding role. Maintenance stays where it already happens instead of being replicated in a second permission system.
Accounts come from what is there
Users come from the same AD scan that fills the inventory. Anyone in the directory does not have to be entered a second time.
Connect Active Directory / LDAP with isidaten
We show you the connector live in your own environment – non-binding and free of charge.