Trusting an AD synchronized towards Azure AD

[Monkey Bizness]

Hi all,
I have seen that FreeIPA can't integrate with Azure AD directly. Which
is not that surprising from what I understand of it's internals.
In the case of a trust with a local AD that is itself synchronized with
azure, would it work?
My instinct tells me it should but anything could happen behind the
seen.
Unfortunately, the guys handling azure/ad won't provide a test system
to check it out to I'm asking here.


Follow up question, any plans to support OpenID connect or SAML for
user auth?

My Best
Monkey

[Vinícius Ferrão]

If I understood correct you have a local Windows Server with AD role up and running and
also have Azure AD Sync installed to sync data from local AD to the cloud.

If this is your scenario I have this running without any issues. FreeIPA does the Trust
with local AD.


Sent from my iPhone

>  On 15 Jan 2021, at 15:39, Monkey Bizness via FreeIPA-users
> <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>  
>  Hi all,
>  I have seen that FreeIPA can't integrate with Azure AD directly. Which
>  is not that surprising from what I understand of it's internals.
>  In the case of a trust with a local AD that is itself synchronized with
>  azure, would it work?
>  My instinct tells me it should but anything could happen behind the
>  seen.
>  Unfortunately, the guys handling azure/ad won't provide a test system
>  to check it out to I'm asking here.
>  
>  
>  Follow up question, any plans to support OpenID connect or SAML for
>  user auth?
>  
>  My Best
>  Monkey 
>  
>  
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>

[Monkey Bizness]

Indeed that is the scenario.
My fear is that the azure connect plugin would bring some behavoral
change to the way the local AD would respond to auth requests comming
from freeipa. 

On Fri, 2021-01-15 at 18:43 +0000, Vinícius Ferrão wrote:
>  If I understood correct you have a local Windows Server with AD role
>  up and running and also have Azure AD Sync installed to sync data
>  from local AD to the cloud.
>  
>  If this is your scenario I have this running without any issues.
>  FreeIPA does the Trust with local AD.
>  
>  
>  Sent from my iPhone
>  
>  > On 15 Jan 2021, at 15:39, Monkey Bizness via FreeIPA-users
>  > <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>  > 
>  > Hi all,
>  > I have seen that FreeIPA can't integrate with Azure AD directly.
>  > Which
>  > is not that surprising from what I understand of it's internals.
>  > In the case of a trust with a local AD that is itself synchronized
>  > with
>  > azure, would it work?
>  > My instinct tells me it should but anything could happen behind the
>  > seen.
>  > Unfortunately, the guys handling azure/ad won't provide a test
>  > system
>  > to check it out to I'm asking here.
>  > 
>  > 
>  > Follow up question, any plans to support OpenID connect or SAML for
>  > user auth?
>  > 
>  > My Best
>  > Monkey 
>  > 
>  > 
>  > _______________________________________________
>  > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  > To unsubscribe send an email to
>  > freeipa-users-leave(a)lists.fedorahosted.org
>  > Fedora Code of Conduct:
>  > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  > List Guidelines:
>  > https://fedoraproject.org/wiki/Mailing_list_guidelines
>  > List Archives:
>  > https://lists.fedorahosted.org/archives/list/[e-mail]...

[Antoine Gatineau]

Thanks for the quick and clear response 

⁣Télécharger BlueMail pour Android ​

Le 15 janv. 2021 à 19:43, à 19:43, "Vinícius Ferrão via FreeIPA-users"
<freeipa-users(a)lists.fedorahosted.org&gt; a écrit:
> If I understood correct you have a local Windows Server with AD role
> up
> and running and also have Azure AD Sync installed to sync data from
> local AD to the cloud.
>
> If this is your scenario I have this running without any issues.
> FreeIPA does the Trust with local AD.
>
>
> Sent from my iPhone
>
> > On 15 Jan 2021, at 15:39, Monkey Bizness via FreeIPA-users
> <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
> > 
> > Hi all,
> > I have seen that FreeIPA can't integrate with Azure AD directly.
> Which
> > is not that surprising from what I understand of it's internals.
> > In the case of a trust with a local AD that is itself synchronized
> with
> > azure, would it work?
> > My instinct tells me it should but anything could happen behind the
> > seen.
> > Unfortunately, the guys handling azure/ad won't provide a test system
> > to check it out to I'm asking here.
> > 
> > 
> > Follow up question, any plans to support OpenID connect or SAML for
> > user auth?
> > 
> > My Best
> > Monkey 
> > 
> > 
> > _______________________________________________
> > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> > To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
> > Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...