active-directory - Is it a good practice to use Active Directory groups for access control

Question

In a organization with lots (hundreds) of internal systems, and lots (thousands) of users, and lots (dozens) of Domain Controllers sites, all WAN-connected, is it a good practice to use Active Directory as a SSO provider and its groups for access control implementation?

Any significant scalability, performance or management issues I should be aware before deciding for it?

Answer 1

在我拥有 100,000 多个用户的组织中，我们使用活动目录。你肯定不会有可伸缩性的问题。