Live data from Hacker News

Does Company ‘X’ have an Azure Active Directory Tenant?

shawntabrizi.com

31–40 of 197 posts

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#32
post #26

What is Azure AD used for?

It does a lot of things, but broadly the thing people know it most for is handling roles, permissions and groups for your organization. It’s often the source of truth for things like access and provisioning. Pretty core part of the organization.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#33
post #28
post #8

Earlier quoted context omitted.

Microsoft absolutely dominates corporate IT. Their Office 360 delivers to much values at a low cost that the corps suffer from mediocre MS products because it's all there through a single subscription.

With AD we have SSO integration with a whole universe of mediocre apps, Jira for instance

I need to always give a password in Jira.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#35
post #30

This is the answer to the question “why can’t we get rid of passwords?”

Or you could do the opposite and be like the company I work for. Force everyone to enter an RSA token on every SSO login.

It doesn't have to be that manual, yubikey etc can just plug and press.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#37

This is the answer to the question “why can’t we get rid of passwords?”

Nah. Azure AD is one of the few IdPs that already supports FIDO2 Discoverable Credentials. You can use Passkeys with it today. You can go passwordless with it today.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#38

Earlier quoted context omitted.

Everyone with O365 has Azure AD. But a smaller number has Azure AD Premium. That’s growing as salespeople get canned if they don’t sell it.

MS is so bad with this stuff. It's difficult to determine what value you get from premium. If I knew maybe I'd buy it!

The service is good, but really expensive and the sales tactics are sleazy. They want you paying $40/mo/head.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#40
post #26

What is Azure AD used for?

Authorization and authentication. Like it or not Microsoft Active Ditectory or Azure AD (basically the cloud version) works with everything and it’s kinda the only single-signon/shared login solution for enterprises. You can build something yourself with LDAP, Kerberos and maybe Keycloak, but why bother when you more or less need AD for Windows and Exchange anyway.

Self-hosted Gitlab instances also can act as authentication services.

Connecting git with an internal AD/LDAP allows for not requiring Azure AD.

Post reply on HN