Multi Cloud Classroom Notes 30/03/2024

Identity Platforms

• Active Directory:
  • This uses a Protocol called as LDAP (Lightweight Directory Access Protocol)
  • Domain controllers (DC):
    • This stores information about users, groups, devices
    • For one organization we will multiple domain controllers
    • Domain controllers can communicate between and establish trust relation ship.
  • ADFS (Active Directory Federation services) which can be used as identity provider which helps in Single sign on (SSO)
  • How we can connect on-prem AD to Cloud
• Google firebase, keycloak, azure ad , aws cognito: All of these provide identity as a service option.
• Governance and Audit

Scenarios

• How does active directory forest look like?

• How to connect on prem active directory to

  • AWS:
    • Identity Provider
    • Directory Service
  • Azure
    • Azure AD/Microsoft Entra
    • AD Connect (to connect existing on-prem ad to azure)

• How to use Google Firebase for your mobile app and how about azure ad and aws cognito.

• How do i know which user has done what activity?

  • Audit trail.
    • AWS => cloud trail
    • Azure => Activity log