Each new Azure account includes a Default Directory with a default domain (for instance, azure.onmicrosoft.com
) that contains the Microsoft account that created the Azure account. While the default domain might be sufficient for small organizations or organizations that do not use Azure Active Directory for their user authentication and authorization, larger organizations and organizations that rely heavily on Azure Active Directory will want to create a new Active Directory domain and customize it based on their needs.
Active Directory domains are assigned with fully qualified domain names. This provides a mechanism to find the domain within a network as well as to identify computers and so on within the domain. In a private network, Active Directory can work with a DNS server (domain name server) to ensure the domain name points to the Active Directory domain controllers (servers). However, with an Azure Active Directory domain, a public domain...