We have a installation of "RSA Governance and Lifecycle 7.0.2" at customer location. Customer is looking for fetching identities from Azure AD.
There is no option in UI to specify directory type as Azure AD. Does the product support fetching identities from Azure AD? It not, then is adding support on the product roadmap?
Thanks Pradeep for the quick reply.
So if LDAP/LDAPS is enabled in Azure AD instance, then we can use the regular "Active Directory" connector to pull the identities out of Azure AD? This assumes that we have direct connectivity from RSA G&L to Azure instance in cloud.
To add to Pradeep's reply a helpful link from the RSA field
Configure Secure LDAP (LDAPS) in Azure AD Domain Services | Microsoft Docs
Thanks Nathan
After they configure LDAPS to connect to Azure AD in IGL using below guide, they can just create the Account Collector under the existing Windows Domain Directory or do they need to create a different Directory solely for Azure?
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-configure-ldaps
That is really a design question and hard for RSA Customer Support to answer without knowing the customer objectives and the nature of the AD data.
Also you have to consider if there are future requirements to provision against these domains using AFX.
Typically if you wish to use AFX you want to collect each domain separately but there is no one correct answer.
Azure AD support LDAP/LDAPS and hence should be no different than on premise AD.
Depending on the availability of network path, you can use a local or remote agent to collect from this.