Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Does Company ‘X’ have an Azure Active Directory Tenant?

shawntabrizi.com

Post reply on HN
Print view View original

121–130 of 197 posts

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#121

Post by yellow_postit »

candiddevmike wrote: post #89
wsjeffro wrote: post #73

What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft. They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

Microsoft's support for multiple accounts is atrocious. I can easily have 5+ Google accounts that I switch between, moving between MS accounts is awful. Additionally MS's free consumer offerings are not competitive with Gmail/Drive IMO.

I'm not a fan of Google's solution either. With a device with multiple G accounts it’s always a guessing game when opening up a google doc which account it’ll choose.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#122

Post by thakoppno »

wsjeffro wrote: post #73

What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft. They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

In the US at least it seems like we’re at the stage where every new account created is essentially tied back to a social security number.

One cannot get an e-mail address without a phone. One cannot get a phone without a credit check. A credit check requires a social security number.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#123

Post by MrStonedOne »

wsjeffro wrote: post #73

What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft. They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

No post body was provided.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#124

Post by DanAtC »

thakoppno wrote: post #122
wsjeffro wrote: post #73

What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft. They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

In the US at least it seems like we’re at the stage where every new account created is essentially tied back to a social security number. One cannot get an e-mail address without a phone. One cannot get a phone without a credit check. A credit check requires a social security number.

Prepaid phones are readily available in the US, no ID or SSN required.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#125

Post by pid-1 »

wsjeffro wrote: post #73

What I can’t understand is why Azure AD doesn’t have a stronger position in the consumer space. Authentication via Google, Apple, and even still Facebook are nearly always supported on customer-facing logins. I rarely see an option for Microsoft. They have a commanding position in the enterprise. What’s keeping them from crossing those enterprise boundaries?

Only very recently Windows started requiring a MS account. I'd guess most people who don't own a Xbox don't have a MS account.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#126

Post by pid-1 »

logifail wrote: post #103
vinay_ys wrote: post #86

Earlier quoted context omitted.

They are much nicer in recent years and are quite transparent with pricing – https://www.microsoft.com/en-us/microsoft-365/compare-micros... See full pdf for all plans: https://go.microsoft.com/fwlink/p/?linkid=2139145 Basically if you have a Microsoft Office 365 Enterprise license (E3 or E5 license – which you need if have business people in your company who can't live without Excel on desktop), you get Azure AD Pre…

> you get Azure AD Premium (P1 or P2) bundled for free Last time I checked what was included with Azure AD the activity logging data was where it looked like things could get expensive. Exporting your authentication logs and/or keeping them for more than a week was a premium add-on.

M365 Business Premium includes P1 and costs 22 USD per user. You also get MDM (Intune) and other security related stuff.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#127

Post by pid-1 »

ab_testing wrote: post #64
PaulWaldman wrote: post #53

Microsoft is traditionally great at bundling their products. This is reminiscent of bundling Internet Explorer with Windows. Could an Okta have a claim against Microsoft similar to Netscape in the late 90's?

Having Azure AD does not prevent clients from also having Okta or any other 2FA provider for 2 factor authentication. In fact, I have worked with at least 10 clients in the last 2 years that used Azure AD for authentication but then something else for 2-factor depending on the type of apps. Sometimes even within one company, there are multiple 2FA protocols, e.g. using Oracle single sign on for ERP apps but Okta for…

> also having Okta or any other 2FA provider for 2 factor authentication

Why would you do that?

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#128

Post by mooreds »

gw99 wrote: post #21
tluyben2 wrote: post #6

I thought it would be 100%; everyone switched to AD after Novell. What are the 16.6% using is the interesting part?

NetIQ eDirectory tends to be the other big one. Although I am seeing a rise in companies not having an SSO solution recently at all. In fact some of the SMEs I've seen recently are running most of their stuff entirely via basic Microsoft O365 accounts or iCloud.

A lot of startups or smaller companies I've worked with are entirely on the Google stack (gmail, google drive). I imagine there's a scale when that option breaks, but I think it'd be fine until 50-100 employees.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#129

Post by pid-1 »

kn8 wrote: post #26

What is Azure AD used for?

Active Directory is Microsoft's LDAP[1] server offering. Eventually it got more features and is used by firms to enforce company wide (or group wide) rules like "Every computer must lock after 5min of inactivity" or "Adobe Acrobat must be installed in all computers".

Azure Active Directory is the cloud version of Active Diretory. It has some extra features compared to on prem AD (MFA, SSO with 3rd paty apps...) but the whole endpoint management part was moved to another product (Microsoft Endpoint Manager).

The reason so many companies have an AAD tenant is it is set up automatically when you configure Microsoft 365.

[1] https://en.wikipedia.org/wiki/Lightweight_Directory_Access_P...

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#130

Post by pid-1 »

roflyear wrote: post #23
Spooky23 wrote: post #16

Earlier quoted context omitted.

Everyone with O365 has Azure AD. But a smaller number has Azure AD Premium. That’s growing as salespeople get canned if they don’t sell it.

MS is so bad with this stuff. It's difficult to determine what value you get from premium. If I knew maybe I'd buy it!

You get Intune (which is called Microsoft Endpoint Manager now) and AAD P1 for all users.

The base use cases are "I want my users to be able to login in MS 365 from company managed devices". and "I want to manage my company's devices".

Post reply on HN