Is it a good practice to use Active Directory groups for access control

Question

In a organization with lots (hundreds) of internal systems, and lots (thousands) of users, and lots (dozens) of Domain Controllers sites, all WAN-connected, is it a good practice to use Active Directory as a SSO provider and its groups for access control implementation?

Any significant scalability, performance or management issues I should be aware before deciding for it?

This might be a better question for [SuperUser](http://www.superuser.com/) — Ethan, Sep 20 '13 at 21:40

score 1 · Answer 1 · answered Sep 22 '13 at 10:59

1

In my organization with 100,000+ users, we make use of active directory. You will certainly not have an issue with scalability.

answered Sep 22 '13 at 10:59

Jay

2,394
11
54
98

Is it a good practice to use Active Directory groups for access control

1 Answers1