What is Azure
Active Directory?
Azure Active Directory is
Microsoft’s multi-tenant, cloud-based directory and identity management
service. For an organization, Azure AD helps employees sign up to multiple
services and access them anywhere over the cloud with a single set of login
credentials.
Azure Active
Directory Concept:
It is important to understand
these Azure AD concepts.
Identity. An object that can get authenticated. An identity
can be a user with a username and password.
Account. An identity that has data associated with it. You
can't have an account without an identity.
Azure subscription. Used to pay for Azure cloud services. You can
have many subscriptions and they're linked to a credit card.
Azure
tenant/directory. A dedicated and
trusted instance of Azure AD, a Tenant is automatically created when your
organization signs up for a Microsoft cloud service subscription.
More
instances of Azure AD can be created.
Azure
AD is the underlying product providing the identity service.
The
term Tenant means a single instance of Azure AD representing a single
organization.
The
terms Tenant and Directory are often used interchangeably.
Compare
Active Directory Domain Services to Azure Active Directory
AD DS is the traditional
deployment of Windows Server-based Active Directory on a physical or virtual
server. Although AD DS is commonly considered to be primarily a directory
service, it is only one component of the Windows Active Directory suite of
technologies, which also includes Active Directory Certificate Services (AD
CS), Active Directory Lightweight Directory Services (AD LDS), Active Directory
Federation Services (AD FS), and Active Directory Rights Management Services
(AD RMS). Although you can deploy and manage AD DS in Azure virtual machines
it’s recommended you use Azure AD instead, unless you are targeting IaaS
workloads that depend on AD DS specifically.
Windows AD vs Azure AD
Windows AD
ADDS (Windows Active Directory
Domain Services):
Allows admin to manage
information relating to user logins.
ADLS (Azure Data Lake Storage
Service):
Allows you to store data of
any type and size.
ADFS (Active Directory
Federation Service):
Allows you to have single-sign-on
access to system and applications.
ADCS (Active Directory and
Certification Services):
Allows you administrators to
customize services in order to issue and manage public certificates.
ADRMS (Active Directory Rights
Management Services)
Is a security tool for data
protection.
Azure AD
Azure AD integrates all above
layers into below two
WAAD (Windows Azure Active
Directory)
This combines all the problem revolving
around identification management.
WAACS (Windows Azure Access
Control Service)
This takes care of federating
all the services of an organization.
Service Audience:
There are three types of audience
in azure active directory.
For more understanding, please
go through below link.
https://docs.microsoft.com/en-us/learn/modules/configure-azure-active-directory/
Thank you !!
Nice1!!!
ReplyDelete