Level 1
0 / 100 XP

Azure Directory Services

In this lesson, we will explore the core directory services provided by Azure, namely Microsoft Entra ID and Microsoft Entra Domain Services. These services enable you to manage identities, authenticate users, and secure your applications both in the cloud and on-premises.

Microsoft Entra ID

Microsoft Entra ID is a cloud-based directory and identity management service. It allows users to sign in and access resources in the Microsoft cloud, as well as custom cloud applications. It also integrates with your on-premises Active Directory to provide a seamless identity experience.

Key Features of Microsoft Entra ID:

  • Authentication : Verifies identity to access applications and resources. It includes features like self-service password reset, multifactor authentication (MFA), a custom list of banned passwords, and smart lockout services.
  • Single Sign-On (SSO) : Simplifies user access by allowing one set of credentials to access multiple applications.
  • Application Management : Manages cloud and on-premises apps using features like Application Proxy, SaaS apps, the My Apps portal, and single sign-on.
  • Device Management : Supports device registration, enabling management through tools like Microsoft Intune and allowing for device-based Conditional Access policies.

Who Uses Microsoft Entra ID?

  • IT Administrators : Control access to applications and resources based on business requirements.
  • App Developers : Add functionality to applications, such as SSO and integrating with existing credentials.
  • Users : Manage identities and perform tasks like self-service password resets.
  • Online Service Subscribers : Users of services like Microsoft 365, Azure, and Microsoft Dynamics CRM Online.

Integration with On-Premises Active Directory

If you have an on-premises Active Directory setup, you can integrate it with Microsoft Entra ID using Microsoft Entra Connect. This tool sync…