Active Directory
The Active Directory service is operated by IT Services as the core system of the ETH Zurich's identity infrastructure. User accounts, computers, group information and group policies are administered in the Active Directory.
The identity data is provided via interfaces (including for password authentication) for systems that are connected to the Active Directory.
The OU administrators are supported with documentation, training as well as administration and security procedures for the administrator activities.
Log and audit data are collected centrally, and regular data cleansing and consistency checks are carried out in accordance with the requirements of ETH Security & Compliance.
With the use of the Active Directory service of IT services, customers can obtain the entire identity management from IT services as a professional service.
In addition to the infrastructure, this also includes robust administrative processes and procedures with a high level of automation and traceability, as well as lifecycle management of defined objects that is integrated with Identity and Access Management (IAM).
Use of the facility also ensures compliance with the ETH IT security guidelines.
The service is available for all units of the ETH Zurich (departments & institutes, the central bodies as well as ETH near (ETH Council, ASVZ, and others)). The OU administrators in their own separate organizational units (OUs) manage the customer-specific data.
The Active Directory Service is made available to ETH Zurich, the departments and their institutes free of charge.