Identity management over multi-cloud environments

One of the first things to decide on, prior to using a multi-cloud strategy, is identity management. Organizations would like to keep their existing Identity Provider (IdP), have a single identity for each of their end users (while preserving existing credentials), and still be able to access resources in the cloud. If an organization is already using Office 365 for managing mailboxes and collaboration, consider using Azure Active Directory (AAD) and its central identity management service.

Azure AD is considered the most used IdP. It supports identity federation to most major cloud providers and is able to integrate with most Software as a Service (SaaS) solutions. Other popular identity management providers that are outside the scope of this book are Okta, Ping Identity, and OneLogin, which allow you a universal directory service for managing your users, groups, and devices, enforcement of Multi-Factor Authentication (MFA), and...