Using ITMS with Microsoft Entra (Azure AD)

[Mike Grueber]

Among the new features included in ITMS 8.7.2 is integration with Microsoft Entra (Azure AD).  This integration, based on OpenID Connect, enables the Symantec Management Console and the Software Portal to use a Microsoft Entra tenant for authentication.  In turn, this permits customers to implement Multifactor Authentication.

The integration with Microsoft Entra also enables customers to import security roles, computer groups and user groups from Microsoft Entra in a manner similar to how the existing AD Import functionality works.

Finally, the support included in ITMS 8.7.2 enables ITMS to operate in Microsoft Entra only environments if a local account on the Notification Server is used for the Agent Connectivity Credentials.

To learn more about how to setup and configure ITMS to use Microsoft Entra, see the new white paper published here.

If you are interested in support for authentication providers other than Microsoft Entra, please leave a comment below. 

[Michael Lieder]

We're currently an Okta shop, and I know they're pretty popular, so supporting them would be huge. Current for people outside our network without a VPN we need to use AppStream to allow Console access, which is just terrible.

[Jose Roberto]

We are evaluating how to protect access to the console, and Entra ID is a good starter.

I would like to see more ways to protect access using PAM and Secrets Management.

------------------------------
Jose Roberto Costa
Europe Consultant | Consulting and Strategy
[e-mail] | orbitextreme.com
------------------------------

[Jose Roberto]

We are a company consuming Google services.

It makes sense to extract more advantages from integrating with Google Cloud Identity.

------------------------------
Jose Roberto Costa
Europe Consultant | Consulting and Strategy
[e-mail] | orbitextreme.com
------------------------------

[Mike Grueber]

@Jose Roberto - do you currently import data related to security roles, computer groups or user groups into ITMS from an on-premise instance of Active Directory?  Do you have similar data in Google Cloud Identity?

[Jose Roberto]

Hi Mike

Do you currently import data related to security roles, computer groups or user groups into ITMS from an on-premise instance of Active Directory? Yes. currently, we are importing role and account resources from our AD.

Do you have similar data in Google Cloud Identity? Yes

------------------------------
Jose Roberto Costa
Europe Consultant | Consulting and Strategy
[e-mail] | orbitextreme.com
------------------------------