Implementing 70-533 - Objective 4 - Implement an Azure Active Directory (15–20%)

Implement an Azure Active Directory (AAD) with existing directories


Implement AAD B2C and AAD B2B

1. Free edition AAD supports 500000 objects
2. Basic edition of AAD supports unlimited objects but no multi-factor
3. Premium edition of AAD supports unlimited objects and multi-factor
4. A CSV file can be used to import up to 200 email and displayNames at a time into Azure B2B Active directory

Configure Application Access

1. Google apps can sign on wiht existing SSO, Azure AD SSO or Password SSO
2. Directory sync is used to sync on-premise AD accounts with Azure AD
3. myapps.microsoft.com displays all AD apps to which the user is assigned
4. Password based SSO with user management allows the user to specify the password to the third party app the first time
5. Windows Azure AD SSO requires that the third party app us AD credentials to authenticate the user]
6. User assignment to myapps.microsoft.com is managed though Azure portal
7. Add users to the Azure AD tenant so they can log in to myapps.microsoft.com

IIS applications not published through Azure AD App Proxy can not do MFA in the cloud

Integrate an app with AAD

1. For your app to do CRUD in Azure AD use the Graph API
2. Graph API also allows provisioning through REST
3. SSO only access level provided minimal default access necessary
4. SSO Read only allows the app to query the directory (uses Graph API)
5. SSO Read Write allows the most access to the directory (uses Graph API)