Live data from Hacker News

Does Company ‘X’ have an Azure Active Directory Tenant?

shawntabrizi.com

171–180 of 197 posts

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#171
post #9

Earlier quoted context omitted.

Good question. I’ve worked at apple and google and both like to cook their own implementation. It was AD there.

Where?

I guess everywhere. I’ve worked at a ton of “big” companies. All AD. Even the company’s that bake everything themselves. (I’m looking at you apple)

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#172

Earlier quoted context omitted.

The service is good, but really expensive and the sales tactics are sleazy. They want you paying $40/mo/head.

Azure AD Premium is $480/year per user???? What in the world do you get for that price point?

I’m talking total subscription relationship.

It’s hard to buy Azure AD alone, they push the EMS suite and O365 E5 to solve the security issues in O365 E3.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#173

The way Microsoft does enterprise price bundling, this is not surprising at all.

They are insanely good at onboarding people onto it as well. I have a small startup just me and a cofounder right now and we pay $12 a month for 365 which includes all of Azure AD. Can start doing full integrations right away to lock us in.

Be sure and look into Microsoft for Startups at some point: https://www.microsoft.com/en-us/startups. It gets you Office and GitHub Enterprise for free, among other things.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#174

For the HN B2B startups here supporting Google Workspace SSO and not Microsoft Azure SSO, or offering Sign in with Google and not Sign in with Microsoft... why? 85% of big businesses are on the one you don't support. "Results for the Fortune 500 [to see who's on Azure AD using a] CSV with a list of all the Company Names for all 500 companies. Running it through this script, I find that 417, or 83.4% of companies have…

azure AD presence does not imply they use msft sso as their sso. sso integration when interacting with a fortune 500 will be a minuscule aspect of the arrangement should you get there. an f500 does not simply decide to use your product and do an sso integration et voila. they want a compliance regiment, a custom crafted legal arrangement, risk assessment, probably an onprem discussion, if you’re small enough a straig…

I hope others listen to this and continue to believe that growing through being a great shadow IT option isn’t viable. Makes my life much easier!

If you want to be used by business users in a hurry, be under their p-card limit and support their SSO out of the box.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#176
post #80
post #45

Earlier quoted context omitted.

It is a directory with a lot of functionality. There's actually a number of products under the Azure AD name, including: * Azure AD, their employee/workforce solution. It's a directory, authentication and authorization system. Think Okta or AWS SSO. I imagine this is mostly what the survey was tracking. * Azure AD B2C, their CIAM solution. Think Auth0, Cognito or FusionAuth (disclosure, I'm a FusionAuth employee). *…

> And they say AWS has a hard time with naming :) honestly though, Azure's naming strategies do exactly what they say. AWS uses names that are adjacent or completely random (fargate?). i don't even think cognito is a word in english language[0] [0] https://www.merriam-webster.com/dictionary/cognito

But we prefer a random name than the very closely related confusing technical names that Microsoft throws out.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#177

Earlier quoted context omitted.

Bundling is fine. Bundling by a company that is a monopoly in the space is (or rather, used to be) a violation of antitrust law. But see Amazon’s Antitrust Paradox, especially sections IIA and IIIB: https://www.yalelawjournal.org/note/amazons-antitrust-parado...

So in that case, every cable company is a local monopoly and shouldn’t be allowed to bundle channels. Doesn’t anyone see how silly this sounds in 2022? Disney is by far the largest entertainment conglomerate. Should they not be allowed to bundle Hulu, Disney and ESPN? Intel has over 80% of the PC market, how much hardware should they be able to bundle on their motherboard? And HN has a habit of calling any big compan…

> every cable company is a local monopoly

A regulated monopoly. Key difference. Although of course today "regulated" is largely a legal fiction. Nevertheless, it's not so simple as pointing out who has the most market share. It's a pretty messy area of the law, and the field is heavily tilted by money, even more so than most areas of the law.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#178

For the HN B2B startups here supporting Google Workspace SSO and not Microsoft Azure SSO, or offering Sign in with Google and not Sign in with Microsoft... why? 85% of big businesses are on the one you don't support. "Results for the Fortune 500 [to see who's on Azure AD using a] CSV with a list of all the Company Names for all 500 companies. Running it through this script, I find that 417, or 83.4% of companies have…

azure AD presence does not imply they use msft sso as their sso. sso integration when interacting with a fortune 500 will be a minuscule aspect of the arrangement should you get there. an f500 does not simply decide to use your product and do an sso integration et voila. they want a compliance regiment, a custom crafted legal arrangement, risk assessment, probably an onprem discussion, if you’re small enough a straig…

Even if they don't use Azure AD as their primary SSO you can often federate indirectly via Azure. For many large corporations, an auth against Azure redirects to Microsoft, then to whatever enterprise SAML2 service they're running, then back to Microsoft to pick up an OIDC token or SAML transformation, then back to your app. Instead of supporting however many SAML 2 providers with custom claim mappings you get Azure's reasonably straightforward token. You can also pick up Azure group membership (which many companies maintain or sync from on-prem AD) which is nice for mapping application roles.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#179
post #91

Earlier quoted context omitted.

Do enough people still use consumer Microsoft accounts? Except for myself, it has been a long time since I have encountered a hotmail address or live address or outlook address in the wild. I've gotten career advice several times to get a GMail instead, because Microsoft was considered out of date and backward (not so much anymore).

Anyone that uses Minecraft (edit: or Xbox) I'm sure it is only a matter of time until some middle manager stakes their promotion on merging it with github and/or linkedin. Microsoft is the only company I deal with where I cannot reliably authenticate. I wish they'd just stop trying to run consumer accounts.

You can link your GitHub account to a Microsoft account and log in to Microsoft with your GitHub account, not sure if you can log in to GitHub with your Microsoft account tho.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#180

Earlier quoted context omitted.

Nah. Azure AD is one of the few IdPs that already supports FIDO2 Discoverable Credentials. You can use Passkeys with it today. You can go passwordless with it today.

Unfortunately, unless this changed too recently for me to know about it, that feature is default off and labelled "Experimental" or something. So it's difficult (ask me how I know) for someone who knows way too much about this stuff and has implemented it themselves, to explain to "leadership" why they should change that default.

I don't know the details except that we've been using it since early this year. The docs don't make it seem like there's anything particularly complicated with enabling it[0][1].

[0]: https://learn.microsoft.com/en-us/azure/active-directory/aut... [1]: https://learn.microsoft.com/en-us/azure/active-directory/aut...

Post reply on HN