How to use LDAP for window azure?

Question

New to ADFS and LDAP, our project is mixed with mongoDb, nodeJS and rails technology. we plan to deploy mongodb, Nodejs, or Rails on Windows Azure, since LDAP is used for the active directory on ruby.how LDAP used in the azure window. is there any performance change when using ADFS in ruby to compare with LDAP in ruby. if so, how can I implement ADFS on RUBY

Does anyone know how this is possible. thank you in advance.

Answer 1

Will your LDAP server stay in place? To be clear, ADFS is not equivalent to LDAP. ADFS is the Security Token Service (STS). LDAP is a directory.

Since you mention ADFS, it is assumed that your applications will authenticate users on the Active Directory local area network. ADFS can only authenticate users in AD, and not on arbitrary directories.

To connect your node.js and ruby ​​application to ADFS, you need to implement either the WS-Federation protocol or SAML. These are 2 protocols supported by ADFS. You can read about it here .

Alternatively, you can implement your own STS and connect it to whatever you want (ADFS or LDAP). If you do this, you will have more control over which protocols will be implemented in your application (for example, OAuth2 or something else). It seems that there are more libraries that you can use compared to WS-Fed / SAML.

There are many open source STSs you can look at. IdentityServer is one of them, and people have successfully created solutions on it. You will have to accept it yourself.

Another alternative is to use a third-party service such as Auth0 (which is available in the Windows Azure Store). ( Disclaimer : This is the product I'm working on.)