Upload
oender-deger
View
527
Download
3
Embed Size (px)
DESCRIPTION
Microsoft Azure Active Directory
Citation preview
MICROSOFT AZURE ITPRO
MICROSOFT AZURE ACTIVE DIRECTORY
Önder DEĞER
Microsoft Azure - MVP
Module Overview
• Introduction to Azure Active Directory
• Administering Azure Active Directory
• Managing Azure Active Directory
What is Azure Active Directory
• Cloud based identity and access management solution
• Can be used as a standalone cloud directory
• Can be integrated into your existing on-premises Active Directory
• Developers can integrate their applications
• Allows for applications to be hosted in the cloud but user authentication is done with corporate credentials
Similarities between Azure AD and AD
• Active Directory is the data store for on-premises identities
• Azure AD stores the same data in the cloud
• Azure AD allows 3rd party cloud applications to interact with data stored in Azure AD
• Data can be synchronized between your local AD and Azure AD
Microsoft Azure Identity
• Azure supports the following cloud identity options:
• Run Windows Server AD in the cloud on virtual machines hosted in Azure
• Use Azure AD to allow users single sign-on to SaaS applications
• Use Azure AD Access Control to log in using different identities
• Not a full replacement for on-premises AD
Azure Active Directory Premium
• Paid offering of Azure AD
• Includes the following features:
• User self-service password reset
• Group-based application access
• Company branding
• Additional security reports
Azure AD Tenant
• Created automatically when you sign up for a Microsoft cloud service
• Can be used with multiple Microsoft cloud services
• Can be created from the Management Portal
• Fully leverage existing user accounts, policies, settings, or on premises directory integration when signing up for a new Microsoft cloud service
User Management
• Global administrators can assign other administrator roles
• Before a users can access a Microsoft cloud service you must create an account for that user
• Must have a unique UPN attribute associated with the account
• Use access and usage reports to monitor your tenant
Group Management
• Collection of users that can be managed as a single unit
• Can be used to simplify administration
• Can assign permissions to multiple accounts at the same time
• Used to assign access to applications or configuring access management to online services
Directory Integration
• Used to simplify cloud-based administrative tasks
• Provides a streamlined sign-in experience for users
• The following types of directory integration are currently available:
• Directory Sync
• Directory Sync with password sync
• Directory Sync with single sign-on
• Multi-Forest Directory Sync with single sign-on
Internet Domain Management
• Can add custom domain name to your Azure AD
• Becomes available to all of your Microsoft Cloud services
• The following should be considered before adding your domain name:
• You can add up to 600 domain names
• You must have already registered the domain name with a registrar
• You can add multiple domains to your tenant but cannot add the same domain to different tenants
• Must verify you own the domain name
Azure AD Application Integrations
Provides identity and access management with an access panel for single sign-on to applications
Azure Multi-Factor Authentication
• Requires more than one verification method for user sign-ins
• The following are authentication options available with Azure AD:
• Multi-factor authentication apps
• Automated phone calls
• Text messages
• Free for Global Administrators
• Additional charge for users
• Can be purchased in two billing options:
• Per user
• Per authentication
Deploying Windows Server AD on Azure Virtual Machines
• You can deploy an additional domain controller into an existing on-premises AD environment using Azure AD
• You should consider the following before doing so:
• Azure VMs need connectivity to on-premises network
• Static IP address are not supported on Azure VMs
• Azure provides two distinct disk types for VMs
• Could provide an alternate solution to Disaster Recovery
• Can be used as a separate environment for testing and development
TEŞEKKÜR EDERİM
Önder DEĞER – Microsoft Azure MVP