Currently, we have a number of domains for various purposes like back office, production, DMZ, partners, etc. There has been a change in management thinking to simplification. They want all the resources to fall under one trust.
I'm responsible for the security of this change (Cybersecurity professional, former Enterprise Admin/Domain Admin). What should I be worried about and is this a good idea?
- How to set up a single sign-on for multiple domains?
- Is asking for credentials from a separate trusted domain an acceptable practice?
- Multiple Independent Levels of Security vs Multilevel security
- What is the real risk from trusted forests / domains?
...so I think I have some of the basics down, but I'm worried about the unknown unknowns.
Thanks in advance.