Mastering Identity and Access Management with Microsoft Azure

Empower users by managing and protecting identities and data, 2nd Edition

Jochen Nickel

• Publisher: Packt Publishing
• Year: 2019
• ISBN:
  9781789131154
• Edition: 2
• Topic: Computer Science
• Subtopic: Cloud Computing
• Index: Computer Science

Start empowering users and protecting corporate data, while managing identities and access with Microsoft Azure in different environments

Key Features

• Understand how to identify and manage business drivers during transitions
• Explore Microsoft Identity and Access Management as a Service (IDaaS) solution
• Over 40 playbooks to support your learning process with practical guidelines

Book Description

Microsoft Azure and its Identity and access management are at the heart of Microsoft's software as service products, including Office 365, Dynamics CRM, and Enterprise Mobility Management. It is crucial to master Microsoft Azure in order to be able to work with the Microsoft Cloud effectively.

You'll begin by identifying the benefits of Microsoft Azure in the field of identity and access management. Working through the functionality of identity and access management as a service, you will get a full overview of the Microsoft strategy. Understanding identity synchronization will help you to provide a well-managed identity. Project scenarios and examples will enable you to understand, troubleshoot, and develop on essential authentication protocols and publishing scenarios. Finally, you will acquire a thorough understanding of Microsoft Information protection technologies.

What you will learn

• Apply technical descriptions to your business needs and deployments
• Manage cloud-only, simple, and complex hybrid environments
• Apply correct and efficient monitoring and identity protection strategies
• Design and deploy custom Identity and access management solutions
• Build a complete identity and access management life cycle
• Understand authentication and application publishing mechanisms
• Use and understand the most crucial identity synchronization scenarios
• Implement a suitable information protection strategy

Who this book is for

This book is a perfect companion for developers, cyber security specialists, system and security engineers, IT consultants/architects, and system administrators who are looking for perfectly up–to-date hybrid and cloud-only scenarios. You should have some understanding of security solutions, Active Directory, access privileges/rights, and authentication methods. Programming knowledge is not required but can be helpful for using PowerShell or working with APIs to customize your solutions.

Section 1: Identity Management and Synchronization

In this first section of the book, you will explore and use several Microsoft Identity and Access Management Service offerings. You will look into Identity Synchronization processes in detail as well.

The following chapter will be covered in this section:

• Chapter 1, Building and Managing Azure Active Directory
• Chapter 2, Understanding Identity Synchronization
• Chapter 3, Exploring Advanced Synchronization Concepts
• Chapter 4, Monitoring Your Identity Bridge
• Chapter 5, Configuring and Managing Identity Protection

Building and Managing Azure Active Directory

Working with the several Software-as-a-Service (SaaS) offerings such as Office 365, Dynamics CRM or Visual Studio Online requires well-managed identities and an excellent basic structure in the Azure Active Directory (AD) that builds the heart of these solutions. You, as an administrator, need to provide a stable identity and access management platform to manage these services.

This chapter explains how to configure a suitable Azure AD tenant, which we use throughout the whole book to explore, understand, and configure the different features and functions in the field of identity and access management with Microsoft Azure. We start with the cloud-only components, followed in the next chapters by the hybrid identity and access management approach.

In this chapter, we go directly to the configuration and learn how to configure and manage users, groups, roles, and administrative units to provide a user and group-based application and self-service access, including the audit functionality. The chapter focuses on the following :

• Implementation scenario overview
• Implementing a solid Azure Active Directory
• Creating and managing users and groups
• Assigning roles and administrative units
• Protecting your administrative accounts
• Providing user and group-based application access
• Activating password reset

• Using standard security monitoring
• Integrating the Azure AD Join for Windows 10 clients
• Configuring a custom domain
• Configure Azure AD Domain Services

Now, we can introduce the implementation scenario.

Implementation scenario overview

After completing the next configuration tasks, you will see the rich functionality of Microsoft Azure in the field of identity and access management, starting with cloud identities. You can demonstrate the different capabilities in your own Microsoft Azure environment. The guidance will focus on the most essential feature sets to give you an idea about their capabilities. We will start to use the default directory, which we call domain.onmicrosoft.com for now, and will change it later to a custom domain name. Domain stands for your desired name like example.com , this is also used for the userPrincipalName of the users in this chapter, e.g. [email protected] is represented in the chapter by my example domain called inovitcloudlabs. Be aware that this name will be visible in different applications, such as SharePoint Online and Skype for Business, to the end user. We recommend the company name without the company form, for instance, inovit GmbH would be inovit.onmicrosoft.com. Use a different name for your tests, so that the domain for a productive environment stays free. This configuration will be the base for all further scenarios in the book. For this reason, we use an Azure, Enterprise Mobility Suite, and Office 365 subscript...

Table of contents

• Title Page
• Copyright and Credits
• About Packt
• Contributors
• Preface
• Section 1: Identity Management and Synchronization
• Building and Managing Azure Active Directory
• Understanding Identity Synchronization
• Exploring Advanced Synchronization Concepts
• Monitoring Your Identity Bridge
• Configuring and Managing Identity Protection
• Section 2: Authentication and Application Publishing
• Managing Authentication Protocols
• Deploying Solutions on Azure AD and ADFS
• Using the Azure AD App Proxy and the Web Application Proxy
• Deploying Additional Applications on Azure AD
• Exploring Azure AD Identity Services
• Creating Identity Life Cycle Management in Azure
• Section 3: Data Classification and Information Protection
• Creating a Security Culture
• Identifying and Detecting Sensitive Data
• Understanding Encryption Key Management Strategies
• Configuring Azure Information Protection Solutions
• Azure Information Protection Development
• Other Books You May Enjoy