Single Sign-on recommendation - Cloud Sprawl

[rgerman]

Hello Everyone,

We have grown quite a bit and I am experiencing what I can only describe as Cloud Sprawl. Basically the company keeps adding cloud services which all have their own authentication systems. It really is a pain to manage and a security concern when needing to deactivate user access.

Googling around, I see many, many SSO Identity providers. I am looking for one centralized solution that can link up to my AD server. Any recommendation or success stories?

Thanks in advance,
Ray

[rderewianko]

There a few good players in the market. (Full disclaimer I work for one)
- Ping Identity
- Okta
- ADFS
Are the two main ones
The other secondary players that come to mind
- Onelogin
- Centrify
- JumpCloud, although their offering is a bit different.
- Google also does SSO with a google apps account

The question you have to ask is "do all your applications support saml or oauth?, and do you have the resources todo sso."

[Mr_Einstein]

Okta is a solid solution which can connect with your existing AD.

Setting up various SSO logins can be a little tedious and/or challenging at times because they are all a little different, but the Okta support team is willing to assist if you encounter issues.

They also offer a cloud-based provisioning solution which could essentially replace your AD. They will likely want to at least try to sell you this option as well.

[rgerman]

I have seen a few threads about Okta, so I will start my research there.

Thank you for the input!
Ray