Az - AzureAD (AAD)

👉 Overview

👀 What ?

Azure Active Directory (AAD) is Microsoft's multi-tenant, cloud-based directory and identity management service. AAD combines core directory services, application access management, and identity protection into a single solution.

🧐 Why ?

AAD is significant because it addresses the challenge of managing and securing access to applications and services in the cloud. It provides a robust set of capabilities to manage users and groups, and it helps secure access to on-premises and cloud applications, including Microsoft online services like Office 365.

⛏️ How ?

To use AAD, you need to create an Azure account, set up a directory, and add users and groups. Then, you can manage access to applications, either by adding an application from the Azure gallery or by adding your own on-premises application. You can also configure Single Sign-On, Multi-Factor Authentication, and other identity and access management features.

⏳ When ?

AAD has been in use since its launch in 2010. Over the years, it has gained widespread adoption due to its comprehensive features and seamless integration with other Microsoft services.

⚙️ Technical Explanations

At its core, Azure Active Directory is an Identity as a Service (IDaaS) solution, which means it provides identity and access management functionality over the cloud. It stores details about users, groups, and devices, and it uses protocols like SAML, WS-Federation, and OAuth to authenticate and authorize access to applications and services. It also includes features for password management, self-service for application access, device registration, user provisioning, and more. AAD can be integrated with existing Windows Server Active Directory, enabling organizations to leverage their existing on-premises identity investments to manage access to cloud services.