Microsoft Azure Active Directory (Azure AD)

A Microsoft Azure Active Directory (Azure AD) is a cloud identity and access management platform that facilitates the creation of identity management systems (to manage cloud application access and identity protection across cloud environments and on-premises environments).

• AKA: Microsoft Entra ID, Azure Identity Platform.
• Context:
  • It can typically provide Identity Management through user lifecycle workflows.
  • It can typically enable Access Control through role assignments.
  • It can typically support Authentication through multi-factor verification.
  • It can typically maintain Security Policy through conditional access rules.
  • It can typically handle Directory Service through azure ad connect.
  • ...
  • It can often facilitate Single Sign-On through federation services.
  • It can often provide Identity Protection through risk detection.
  • It can often implement Access Governance through access reviews.
  • It can often support Application Integration through service principals.
  • ...
  • It can range from being a Free Azure AD to being a Premium Azure AD, depending on its licensing tier.
  • It can range from being a Cloud-Only Directory to being a Hybrid Identity Solution, depending on its deployment model.
  • ...
  • It can integrate with Microsoft 365 for workspace authentication.
  • It can connect to Enterprise Applications for application access.
  • It can support Security Information systems for threat protection.
  • ...
• Examples:
  • Azure AD Implementation Types, such as:
    • Azure AD Authentication Types, such as:
      • Password-Based Authentication for user login.
      • Certificate-Based Authentication for device authentication.
      • Windows Hello for Business for passwordless authentication.
    • Azure AD Access Types, such as:
      • Conditional Access Policy for risk-based control.
      • Just-In-Time Access for privileged access.
      • Guest User Access for b2b collaboration.
    • Azure AD Protection Types, such as:
      • Identity Protection Policy for risk detection.
      • Access Review Policy for access governance.
      • PIM Policy for privileged identity management.
  • ...
• Counter-Examples:
  • AWS Identity and Access Management for amazon web services.
  • Google Cloud Identity for google cloud platform.
  • On-Premises Active Directory which lacks cloud capabilitys.
• See: Enterprise Identity Platform, Cloud Access Security, Identity Governance Platform, Zero Trust Security.

---