Active Directory and Entra ID Alternative
User management, Windows domain, single sign-on and multi-factor authentication with European software.
Active Directory and Entra ID manage users, groups and sign-in in most companies. Whoever controls them controls access to every other system.
Univention Corporate Server from Bremen provides an Active Directory compatible domain, central user management and single sign-on. The platform is also part of openDesk, the workplace of the German federal administration.
BARNICOM plans the new user management, switches computers and applications and runs the environment. It is often the foundation for a Microsoft 365 alternative.
Why companies look for alternatives
Access under US law
The US CLOUD Act requires US providers to hand over data to US authorities on request, even when it is stored in Europe (CLOUD Act explained).
The key to everything
Whoever controls sign-in controls access to every system. If it sits with a US provider, the entire operation depends on it.
Features behind licenses
Many security features such as conditional access are tied to higher Microsoft license tiers.
What replaces what
The building blocks of Active Directory and Entra ID and European solutions for them. Which option fits is something we work out together.
| Area | Active Directory | Entra ID | European alternatives |
|---|---|---|---|
| Users and groups | AD DS | Entra ID | Univention Corporate ServerGermany |
| Windows domain | Domain controllers, group policies | Entra join | Univention with a Samba AD compatible domainGermany |
| Single sign-on | AD FS | Entra SSO | Univention with Keycloak, self-hostedGermany, open source |
| Multi-factor authentication | Partner products | Entra MFA | privacyIDEAGermany |
| Device management | SCCM | Intune | baramundi or comparable European solutionsGermany |
Origin refers to the vendor’s headquarters.
How the switch works
-
Assessment
What is in use, who uses it and what does it depend on? The result is a plan with effort and timeline.
-
Test environment
Sign-in, group policies and the most important applications are tested in a test environment.
-
Cutover
Users and groups are migrated, computers join the new domain and applications switch to the new sign-in.
-
Operations
We take care of updates, monitoring, backup and support, with a service level agreement on request.
When the alternative is not a fit
Switching does not make sense in every case. We point out limitations beforehand, for example with:
- many complex group policies that can only be partly reproduced
- applications that strictly require Entra ID for sign-in
- an on-premises Exchange Server tightly bound to Active Directory
Frequently asked questions
What is Univention Corporate Server?
Univention Corporate Server is a platform for user and permission management by Univention GmbH in Bremen. It provides an Active Directory compatible domain and manages access centrally.
Can Windows PCs join the domain?
Yes. Univention provides a domain that Windows PCs join like an Active Directory domain. Group policies are supported, and we check the scope beforehand.
Does single sign-on work with cloud services?
Yes, through standards such as SAML and OpenID Connect. Employees sign in once and use all connected applications.
Do we still need Microsoft licenses?
Not for user management. Windows licenses for workstations remain as long as Windows is in use.
What does the switch cost?
It depends on the number of users, sites and connected applications. You receive a proposal after the assessment.
More alternatives for workplace and collaboration
Review your user management
We look at your domain, policies and applications and tell you what can be switched.