📖 What is Azure Active Directory (Entra ID)?
Azure Active Directory (Entra ID) is Microsoft’s cloud-based identity and access management service. It provides authentication, authorization, and user management for accessing Azure resources, Microsoft 365 applications, and other cloud services, enabling single sign-on and multi-factor authentication.
"Entra ID is not a direct replacement for on-premises Active Directory, but rather a complementary service. Be prepared to differentiate between Entra ID, Azure AD B2C, and on-premises Active Directory. Understand its role in conditional access and identity governance."
📚 Certification: Microsoft Azure Fundamentals (AZ-900)
🔑 What are the Key Concepts of Azure Active Directory (Entra ID)?
- ▸ Entra ID provides centralized identity management, enabling users to access multiple resources with a single set of credentials (SSO).
- ▸ Conditional Access policies enforce security requirements like MFA or device compliance before granting access to applications and data.
- ▸ Entra ID integrates with on-premises Active Directory via Azure AD Connect, enabling hybrid identity solutions and synchronization.
- ▸ Different license levels (Free, Basic, Premium P1, Premium P2) unlock varying features like advanced security reports and identity governance.
- ▸ Entra ID B2C is a separate service designed for customer-facing applications, managing identities for external users, not employees.
🎯 How does Azure Active Directory (Entra ID) appear on the AZ-900 Exam?
You may be asked to identify the Azure service used to manage user access to a newly deployed virtual machine, focusing on authentication and authorization.
A scenario might describe a company needing to implement multi-factor authentication for all users accessing sensitive data – determine how Entra ID facilitates this.
Expect questions about how to synchronize on-premises Active Directory users to Azure using a specific tool, and the implications for user management.
❓ Frequently Asked Questions
What’s the difference between Entra ID and Azure AD Connect?
Entra ID is the cloud identity service itself. Azure AD Connect is the tool used to synchronize identities from your on-premises Active Directory to Entra ID, enabling hybrid scenarios.
When would you use Entra ID B2C instead of Entra ID?
Use Entra ID B2C when you need to manage identities for customers accessing your applications, like a retail website. Entra ID is for employees and internal users.
How does Entra ID support a Zero Trust security model?
Entra ID enables Zero Trust through features like Conditional Access, requiring verification of user identity, device health, and location before granting access, minimizing implicit trust.