Book Image

Mastering Identity and Access Management with Microsoft Azure - Second Edition

By : Jochen Nickel
Book Image

Mastering Identity and Access Management with Microsoft Azure - Second Edition

By: Jochen Nickel

Overview of this book

Microsoft Azure and its Identity and access management are at the heart of Microsoft's software as service products, including Office 365, Dynamics CRM, and Enterprise Mobility Management. It is crucial to master Microsoft Azure in order to be able to work with the Microsoft Cloud effectively. You’ll begin by identifying the benefits of Microsoft Azure in the field of identity and access management. Working through the functionality of identity and access management as a service, you will get a full overview of the Microsoft strategy. Understanding identity synchronization will help you to provide a well-managed identity. Project scenarios and examples will enable you to understand, troubleshoot, and develop on essential authentication protocols and publishing scenarios. Finally, you will acquire a thorough understanding of Microsoft Information protection technologies.
Table of Contents (23 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Microsoft identity platform


Microsoft provides an identity platform with two endpoints called V1.0 and V2.0 with two sets of client libraries to work with these endpoints. The following libraries are used: Azure AD Authentication Library (ADAL) SDK and the Microsoft Authentication Library (MSAL). In the Azure AD portal, we will find how to include applications built with ADAL or MSAL over the app registrations (preview), as shown in the following screenshot:

Microsoft identity platform overview

The following list describes the main use cases of the two endpoints:

  • The V1.0 endpoint allows only work and school accounts to sign in
  • The V2.0 endpoint allows work and school accounts from Azure AD and Microsoft Accounts (MSA) to sign in
  • The v2.0 endpoint does not support SAML or WS-Federation—only OIDC and OAuth 2.0
  • The v2.0 endpoint doesn't support the SAML assertion grant
  • Both endpoints accept sign-ins from guest users for single-tenant or multi-tenant applications

Now that we have an overview on the...