Object Storage and Access
Object storage like AWS S3, Azure Blob, DigitalOcean spaces, etc. allows enterprises to store large amounts of data. One of the common way to share and collaborate files from the storage is by using a pre-signed URL against each file.
Sharing a large number of files using pre-signed URL becomes tedious and unmanageable especially when multiple users are involved for collaboration.
From a security perspective, it is very essential to govern restrictive access to users depending on the needed permissions. This has been a common challenge faced by storage administrators.
Secure Access and Permissions
In an organization there is always a need for sharing files or folders with internal or external users from a corporate based centralized storage be it cloud or on-premise.
Internal users include employees, contractors, etc. and external users can include partners, customers, etc. Sharing and collaborating files or folders with permissions to allow download, upload, view, delete, etc becomes equally important to control the access on the file storage along with the ability to monitor audit events.
Having audit records and email alerts to track user actions like upload, download or delete will help corporate to have a real time eye on the storage for better security.
While having better restrictive access, it is also important to let administrator choose the method of authentication for the users depending on the business needs. Authentication mechanisms can include simple Form-based, one time password, single Sign-On or multi-factor authentication systems.
SSO Using Existing Identity Provider
Most organizations do have their own vendor specific identity providers to provide SSO access to their resources with employees such as Google workspace, ActiveDirectory, Okta, IAM Identity Center, etc.
SSO allows a user to access many applications with a single credential. It relieves us from the pain of remembering many passwords.
Granting access to AWS S3 storage with a SSO of an existing identity provider empowers organizations to leverage their existing infrastructure and adhere to security policies.
Control Access to Object Storage Files Using SSO
NirvaShare helps organizations to secure, manage and collaborate their object storage files like AWS S3, Azure Blob, etc. in a simplified manner. In-built with fine access control on file storage and provides variety of authentication mechanisms to users while accessing the shares. It is capable of integrating with multiple identity providers such as ActiveDirectory, Salesforce, IAM Identity Center, etc.
Integrations
Technically, most of the identity providers can be integrated with NirvaShare for SSO that supports SAML. Please check below documentation for some of the identity provider integrations to enable SSO for your object storage. For more on related topics, check the documentation HERE
- Azure Blob Storage with Active Directory
- AWS S3 with Okta
- Azure Blob file sharing with Active Directory users using SSO
- Share Vultr storage files with Active Directory users using SSO
- Share AWS S3 files with active Directory users using SSO
- Wasabi Object storage file sharing with Active Directory users using SSO
- Linode file sharing with Active directory users using SSO
- Oracle object Storage file sharing with Active Directory users using SSO
- Digital Ocean Spaces file sharing with Active Directory users using SSO
- Google Storage file sharing with Active Directory users using SSO
- Share E2E files with active Directory users using SSO
- Azure Blob file sharing with Active Directory users using SSO
- Share Backblaze B2 files with Active Directory users using SSO
- Share MinIO files with Active Directory users using SSO
- Azure storage file sharing with Okta users using SSO
- Linode storage file sharing with Okta users using SSO
- Azure Blob storage file sharing with Okta users using SSO
- Google storage file sharing with Okta users using SSO
- Share MinIO storage files with Okta users using SSO
- Share files from Oracle storage with Okta users using SSO
- Share Backblaze B2 storage files with Okta users using SSO
- Share Digital Ocean storage files with Okta users using SSO
- Share Wasabi storage files with Okta users using SSO
- Share Vultr storage files with Okta users using SSO