2
votes

Our application store some user information(username, password) in LDAP, and because we cannot change the authenticate code, so we would like to setup a LDAP server in Azure, but I do not see Azure provide such service.

is it possible?

Curently, we have LDAP, DataBase, Application(java,tomcat). DataBase is used to store some business information, LDAP is used to store user credentials.

If user want to use our service, he should sign up, then we will store his credentials to LDAP and when he login, we will compare the credential.

1

1 Answers

2
votes

LDAP works within the bounds of a domain, but your browser will not present your credentials to sites out on the internet.

I have two suggestions, I haven't tested either of them.

Option 1:

Use Windows Azure Connect to add the Azure boxes to your own domain, thus allowing users within the domain to authenticate.

Option 2:

Install AD FS 2.0 on your companie's intranet or DMZ, and then add it as an identity provider in the Access Control Service. You then add the Access Control Service as an identity provider in your application. When a user attempts to use your application, they will be redirected to the AD FS server (via the ACS) to authenticate with their local credentials.