Entra ID

Entra ID is the identity provider for MSFT clouds
1. “Azure”
2. M365
3. Dynamics 365
Entra ID is not AD in the cloud.
1. Has flat structure/ No OUs
2. Has administrative units
We can create additional tenants
By default it will <>.onmicrosoft.com
1. Can create/add custom domains
When assigning license to groups only license applied to first level works not to members of nested groups

“Entra connect” to sync between on-prem AD and “Entra ID”
Active directory is always the source of truth.
Even if HR system is connected to Azure. Entra ID talks to on-prem to create object, which then replicates to Entra ID.

references:

Updated April 1, 2024 at 13:27 . Thoughts? Email me.

Posted to:

Add Custom Domain to Entra ID TIL

Add a custom domain in Entra ID
Entra ID Tenant TIL

Dedicated and Trusted instance of Entra ID
Azure Monitoring Old TIL

Monitoring "Entra ID" - 7/30 days retention
Azure DNS TIL

For "Entra ID" only TXT or MX records
Azure Storage Account TIL

Use AAD (Preferred approach)
Azure ABAC TIL

On user level, we could create and add custom attributes for users in "Entra ID"
Authentication and Authorization TIL

AuthZ is always against "Entra ID".
Entra ID Roles TIL

Permissions applied for Entra ID
Entra ID Managed Identities TIL

AAD creates access token and sends it back to IMDS, which gives it to resource
Microsoft Entra TIL