Live data from Hacker News

Does Company ‘X’ have an Azure Active Directory Tenant?

shawntabrizi.com

101–110 of 197 posts

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#101
post #97

Earlier quoted context omitted.

Microsoft's support for multiple accounts is atrocious. I can easily have 5+ Google accounts that I switch between, moving between MS accounts is awful. Additionally MS's free consumer offerings are not competitive with Gmail/Drive IMO.

It's even worse if you have personal and business accounts tied to the same email address - you never know which one you're using, or which you need.

This is a terrible idea to begin with.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#102
post #97

Earlier quoted context omitted.

Microsoft's support for multiple accounts is atrocious. I can easily have 5+ Google accounts that I switch between, moving between MS accounts is awful. Additionally MS's free consumer offerings are not competitive with Gmail/Drive IMO.

It's even worse if you have personal and business accounts tied to the same email address - you never know which one you're using, or which you need.

Indeed. I've never understood this distinction. Either it's a business account, or it's a personal account. It's bad enough that people use their business mail to sign up for personal stuff, we don't need Microsoft to make it even worse.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#103

Earlier quoted context omitted.

This is awesome! I went 6 times to Microsoft AD’s pricing page and I could never figure out how much it would be! Then I remembered it would be bundled with Azure, which, like any cloud, has the “It’s 0.0062$ per unit of consumption, so sometimes it’s 2€ per month, sometimes it’s 647€, we never know ourselves, good luck!” effect. Has anyone else sometimes avoided a cloud service because the pricing was opaque?

They are much nicer in recent years and are quite transparent with pricing – https://www.microsoft.com/en-us/microsoft-365/compare-micros... See full pdf for all plans: https://go.microsoft.com/fwlink/p/?linkid=2139145 Basically if you have a Microsoft Office 365 Enterprise license (E3 or E5 license – which you need if have business people in your company who can't live without Excel on desktop), you get Azure AD Pre…

> you get Azure AD Premium (P1 or P2) bundled for free

Last time I checked what was included with Azure AD the activity logging data was where it looked like things could get expensive. Exporting your authentication logs and/or keeping them for more than a week was a premium add-on.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#104
post #97

Earlier quoted context omitted.

It's even worse if you have personal and business accounts tied to the same email address - you never know which one you're using, or which you need.

> It's even worse if you have personal and business accounts tied to the same email address - you never know which one you're using, or which you need I have a friend who managed to do get into this mess, and he's still not sure how he did it. firstname.lastname@companybizname.TLD is apparently linked to two separate identities at Microsoft, one is a business account, one is a "personal" account. Every time he experi…

I read an explanation from some Microsoft page or rep. that it had to do with making personal purchases in the Windows Store when you're signed in using your business account. IIRC the rationale was that the personal account could persist beyond your employment, so you wouldn't lose any purchases if you switched jobs.

If I indeed recall correctly, then that doesn't really make sense. Just force people to make a different, actual personal account, and have them use that.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#105
Presumably this is the same thing whatismytenantid.com does under the hood.

Interesting (to me) is that the OpenID configuration endpoint provides the tenant ID for not only Commercial tenants but US Government (GCC & GCC-High) as well because the Azure AD portal has relatively new functionality to configure cross-tenant access settings by tenant ID or domain name but Gov tenants require you to obtain the tenant ID from the organization which is either security through obscurity or due to use of some Commercial-only Graph API call.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#106

Bundling is anticompetitive and illegal. The MS ecosystem deserves close antitrust scrutiny.

So in that case are the following “illegal” - Apple One - Microsoft Office - Amazon Prime - Google GSuite - Adobe Creative Cloud - Salesforce bundling SFDC with Concur

Honestly, I think the regulators should look at basically all of those things. Here in Europe scrutiny is building and a lot of those organisations do party hard and play loose with the rules. Microsoft is famously anticompetitive, but Adobe, Google and Apple can't be far behind in their respective areas.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#107

Presumably this is the same thing whatismytenantid.com does under the hood. Interesting (to me) is that the OpenID configuration endpoint provides the tenant ID for not only Commercial tenants but US Government (GCC & GCC-High) as well because the Azure AD portal has relatively new functionality to configure cross-tenant access settings by tenant ID or domain name but Gov tenants require you to obtain the tenant ID f…

>Presumably this is the same thing whatismytenantid.com does under the hood.

Which is just something like (using slack.com as an example):

https://login.microsoftonline.com/slack.com/.well-known/open...

More urls here: https://o365blog.com/post/just-looking/

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#108

What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft. They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

Do enough people still use consumer Microsoft accounts? Except for myself, it has been a long time since I have encountered a hotmail address or live address or outlook address in the wild. I've gotten career advice several times to get a GMail instead, because Microsoft was considered out of date and backward (not so much anymore).

How times have changed, I mostly hear Google being called backwards now for its view that customers are just beta testers you dispose of when your latest moonshot project doesn’t hit orbit.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#109
Doesn't the end point show up once you have SSO with your own identity provider enabled for any Microsoft services? Maybe technically this means that you have an Active Directory tenant as well, but it doesn't necessarily imply that you are using those Active Directory services for anything beyond that SSO capability.

For Google Workspace, a similar URL is: https://www.google.com/a/example.com/ServiceLogin

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#110
post #82
post #33

Earlier quoted context omitted.

I need to always give a password in Jira.

Jira, and the whole of Atlassian Cloud services, bundle SSO as a separate service you pay for. It's called Atlassian Access and it costs $4-$2 depending on number of users, so many companies skip it because it easily doubles your Jira/Confluece costs. sso.tax

Jira’s cheapest license is $7.5, Atlassian Access as its most expensive is $4 a month. It will never double your Jira bill.
Post reply on HN