Active Directory (AD) Bridge

Simplify Zero Trust Security Controls across Windows, Unix, and Linux

Security administrators often struggle to enforce Zero Trust and other security policies consistently across the heterogeneous enterprise. AD Bridge simplifies the secure management of access and identities, and the path to implementing zero trust enterprise-wide. Automatically map policy settings and apply them to all systems—regardless of operating system or application.

With AD Bridge, organizations can attain consistent security policies and access controls across the enterprise, and seamlessly transition users from desktops to remote machines or between systems, without requiring credential reentry.

Extending native group policy management across non-Windows platforms enables centralized configuration management, reducing the risk and complexity of managing a heterogeneous environment.

Seamlessly Integrate Unix/Linux into your Active Directory Environment

1) During installation of AD Bridge tools on a Windows system, set up guides users to configure the AD environment with plugins to AD Users and Computers (ADUC) and the Group Policy Object (GPO) Editor.

2) Within ADUC, a tab is added to the AD object properties to create identity mappings (Cells) for Unix/Linux endpoints.

3) AD Bridge is installed on Unix/Linux clients so they can join the domain. Group Policy and identity mapping are applied based on the computer object's location within AD.

4) When a user authenticates on a Unix/Linux endpoint, AD Bridge searches for the account in AD using LDAP and authenticates with Kerberos, just as a Windows host would.

5) Event data is sent to a collection server and forwarded to a local SQL database or ElasticSearch cloud instance.

Improve your security posture across your existing infrastructure

With easy-to-deploy, out-of-the-box integrations, Active Directory Bridge fits seamlessly into your existing solutions. Improve your overall security posture and workflows with comprehensive integrations that include Entra ID (formerly Azure Active Directory), Elastic search, Samba, Apache, Network File Sharing (NFS), and more.

A One-Platform Approach to Identity Security

The BeyondTrust Pathfinder Platform unites our best of breed security solutions (including AD Bridge) under a single login, delivering a streamlined experience that enhances operational agility, while also bringing shared, intelligent context across all our products to unlock powerful synergies. With our integrated Pathfinder platform, customers can benefit from the broad and deep capabilities reflected in our multicategory identity security leadership, and leverage the fastest time-to-value via a unified approach to manage their entire identity attack surface.