Azure Active Directory

An absolute requirement for any M365 tenant

Kommentare: We had Office 365 licecnes but were not using them due to being a Lotus Notes environment. Moving off this to Outlook/teams/sharepoint meant having a away to configure users to be able to access these easily. It meant group based sercurity and access, it meant SSO and MFA. All configured easily through AAD.

Vorteile:

Being able to sync form my on premise AD means i can configure and provision users in one place and have their details available for M365 applications and powerfull tools such as password self service, MFA and SSO.

Nachteile:

There are still some limitations that mane i cannot just have a fully cloud based AD platform. I still need locak AD on a server onnected with Azure AD. Hopefully soon it can go and i can have just the one.

Inexpensive, Many Integrations

Vorteile:

Cost was affordable and it provided an easy way to migrate from on prem domain controller to Azure AD. It also integrated with a number of the other SAAS applications we used making setting up integrated authentication easy.

Nachteile:

When you move a computer from Joined to a local AD over to Azure AD you lose some of the management options (GPO).

Excellent access management and identity management service

Vorteile:

It's simple to use and straightforward, and because it's housed in the cloud, there's rarely any downtime. Groups and users can be created in seconds, and some more complex features, such as conditional access restrictions, make controlling access and implementing multi-factor authentication quite simple. Azure AD aided us in integrating several technologies, managing access, and securing our identities. We suffered from service availability when utilizing Active Directory.

Nachteile:

Troubleshooting technical difficulties by the Microsoft team may take some time, and obtaining the appropriate technical help may be challenging. With the dizzying array of permissions available, it might be difficult to determine which one(s) to apply for a specific use case.

The best solution for a Microsoft-heavy company.

Vorteile:

I like the main dashboard gives you alerts on upcoming major changes and remediation to avoid service interruptions. There is the seamless integration with on premise Active Directory that makes it easy to sync and migrate. The monitoring blade is great to show access with details on time, user, application, remote IP Address, location and MFA. I also like the separation and ease to create service principals or applications and lock them down to specific roles. I also like the feature of setting accounts as Guest so that you can furter restrict non company users. Overall one of the best ID management solutions for Microsoft shops. Great API and powershell documentation

Nachteile:

No compains but I wish more security features that are hidden are brought and promoted in the GUI.

Azure Active Directory is the best way to manage your users accounts

Vorteile:

It's intuitive and easy to use, it's hosted in the cloud so there is rarely any downtime (if ever!). Groups and users can be set up in a matter of seconds and there are some more advanced settings such as conditional access policies, which make restricting access and enforcing multi-factor authentication very straightforward.

Nachteile:

Azure AD can be expensive, especially if you have a lot of users and a large infastructure to manage and maintain.