Book Image

Building Hybrid Clouds with Azure Stack

Book Image

Building Hybrid Clouds with Azure Stack

Overview of this book

Azure Stack is all about creating fewer gaps between on-premise and public cloud application deployment. Azure Stack is the logical progression of Microsoft Cloud Services to create a true hybrid cloud-ready application. This book provides an introduction to Azure Stack and the cloud-first approach. Starting with an introduction to the architecture of Azure Stack, the book will help you plan and deploy your Azure Stack. Next, you will learn about the network and storage options in Azure Stack and you'll create your own private cloud solution. Finally, you will understand how to integrate public cloud using the third-party resource provider. After reading the book, you will have a good understanding of the end-to-end process of designing, offering, and supporting cloud solutions for enterprises or service providers.
Table of Contents (19 chapters)
Title Page
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface

Authentication in Azure Stack


Authentication is one of the most important topics if you plan to implement Azure Stack. As it comes without any direct connection to your data center's infrastructure, you'll need to decide how to connect it to your preferred authentication mechanism.

For Azure Stack, the basic authentication service is MS-Graph. This service is being used with Azure and Office 365, too. Basically, it is a REST service to an internal directory service and it builds the basis of authenticating all virtual machines and services within the Azure Stack itself.

Regarding user authentication for customers, there are two choices:

  • Azure Active Directory (Azure AD)
  • Active Directory Federation Services (ADFS)

Azure Active Directory for Azure Stack

If your Azure Stack environment is able to connect to the internet directly, Azure AD is the preferred authentication mechanism. This means Azure Stack will directly interoperate with Azure AD for user authentication. The appropriate authentication...