Hacker News Reader

Comment by blantonl | Hacker News Reader

Does anyone actually use LDAP as a user store these days anymore?

Yeah, because there's nothing else and everything supports LDAP. Even if you're using some SaaS offering when it comes time to integrate it with off-the-shelf on-prem software the path of least resistance is pretty much always LDAP.

And since you have to have AD/Azure AD for Windows logins if you want single-password (not necessarily SSO) your source of truth is now an LDAP server.

Just about every major enterprise in the world?

Its extensible, standartised and available as backend in many products.

What do you use instead?

A lot of SaaS services just auth against other SaaS accounts, like Google/Azure/Github/AWS.

I don't love this state of affairs as I'd rather just use my password manager for everything (and it's particularly bad when you have a mix of on-prem stuff that does AD and then other cloud stuff that doesn't), but I suppose it probably works well for shops that use exclusively cloud services.

Guess what Google, Microsoft base your SaaS auth on (can't speak for GH,AWS).

> I don't love this state of affairs as I'd rather just use my pass

That’s fine when you’re a sole developer or a small team but the moment your organisation grows you need SSO.

> and it's particularly bad when you have a mix of on-prem stuff that does AD and then other cloud stuff that doesn't),

Most cloud services do support AD (eg via SAML) but hide that option behind an enterprise subscription.

Nope. No one. Everyone uses cloud nowadays.

absolutely.

Reply on news.ycombinator.com