Most Telco companies have Network Elements and OSS devices rather than a Windows environment. Hence it is very common to not have an AD in their environment.
Their authentication sources to these Network Elements and OSS can be from a TACACS servers where it is not integrated to AD. While it may be possible to onboard the TACACS server and manage the TACACS accounts via SSH expect scripts or API, we find that there is little way we can link these accounts to their Network Elements and OSS.
As it stands now, the only method of achieving the above is to deploy a "dummy" AD with the same account names in the TACACS server, sync the accounts in the TACACS server to the accounts in the "dummy" AD and link the "dummy" AD accounts to the rest of the Network Elements and OSS.
We are looking for a feature enhancements where we can directly link the accounts onboarded in the said TACACS server to the Network Elements without needing the "Dummy" AD