Azure Active Directory- Key Points to Remember

Azure Active Directory

AAD-   Key point about AAD

Azure AD is accessible via a modern REST API. This allows a wide range of applications—on-premises, cloud, mobile, and so on—to access the rich information available in the Azure AD directory. If you have access on any Microsoft cloud service like Azure, Office 365 etc.. Already you have a default directory.

·         Software as a Service (Managed By Microsoft)

·         Multi-tenant Service
·         Provides Multi-Factor Authentication
·         Provide Single-sign on
·         Manage User and Access to cloud resource.
·         Protocols- SAML, OAuth, WSFED
·         Group policy is replaced by Microsoft InTune
·         LDAP is replaced by Graph-API
·         Edition of AAD- Free, Premium P1 (Hybrid users , other administrator things like Dynamic Groups, Self Service group management, MIM, Self  Service password reset for your on-premises users), Premium P2 (Free+P1+ AAD identity protection)
·         Office 365 comes with free edition of AAD.
·         AAD Connect is used for synchronization on premises AD with AAD.
·         Tenant means  organization
·         Each tenant has a core domain(onmicrosoft.com)

Active Directory has below given services.

•   ADDS
•  ADFS
•  ADLS- Active Data Lake Storage
•  ADCS- Active Directory and certification service 
• ADRMS-Active Directory Right management service

AD Service layers

But AAD has only two services

·        WAAD-Window Azure Active Directory
·         WAAC- Window Azure Access Control Service

AAD Service layer