Our Active Directory domain predates Windows Server 2016 and doesn't natively support OpenID Connect — if we move to IFS Cloud before upgrading the domain, is there still a way to authenticate users against our existing on-prem AD, for example via a third-party relay that exposes LDAP as OpenID Connect?

All FAQ questions / Security and access

Answer

Rather than relying on a third-party LDAP-to-OpenID-Connect relay, bridging through Azure AD is the more established path: from Windows Server 2012 onward, you can subscribe to Azure AD and install Azure AD Connect on-premise to sync your existing on-prem AD users into Azure AD, then configure IFS Cloud to authenticate against Azure AD rather than your on-prem AD directly. This avoids needing to upgrade the underlying on-prem domain controller version just to get native OpenID Connect support, since Azure AD itself provides the OpenID Connect endpoint IFS Cloud needs.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions