Entra ID/Azure Active Directory And Azure AD Domain Services

Learn what Azure Active Directory is, how it differs from on-premises Active Directory, and how licenses, tenants, and subscriptions relate.

this lecture clarifies that intra id and azure ad are the same directory service, renamed under the Microsoft intra product family, the foundational cloud identity and access management.

Discover the Microsoft Entra ID in the Azure portal, compare the regular portal with the Entra admin center, and understand hybrid identities, on-prem sync, and cloud versus on-prem groups.

Explore Entra ID licensing tiers—free, P1, P2, and the Intra suite—with enterprise features, upgrade paths, and standalone add-ons, plus how licenses map to Microsoft 365 plans.

Azure subscriptions grant access to services and portal, tied to an Azure AD tenant. Multiple subscriptions can share the same directory, but each subscription uses a single directory with billing.

Compare Azure Active Directory Domain Services with Azure Active Directory and with do it yourself Active Directory, and identify deployment scenarios for using Azure Active Directory Domain Services on Azure.

Compare Azure AD Domain Services and traditional Active Directory, noting Azure AD Domain Services is a managed service with limited control, no ldap writes or schema extension.

Configure a customized Azure AD domain, integrate Azure AD with on-premises Active Directory, sync objects, enable Azure AD Domain Services, join machines to the domain, and manage the service.

Register a custom domain in Azure Active Directory to allow sign-in with company emails. Verify ownership via a public DNS TXT record and synchronize with Azure AD Domain Services.

Compare Entra Connect and Entra Cloud Sync to understand installation, availability, provisioning, and password write back versus password hash sync for hybrid identity between on-premises Active Directory and Entra ID.

Discover how to integrate Azure AD with on premises Active Directory using Azure AD Connect Sync, focusing on prerequisites like domain verification and global administrator setup.

Demonstrates installing and configuring Azure ad connect to sync on-premises active directory with azure ad, covering ports, domain controller prerequisites, and options like password hash synchronization and single sign-on.

Prepare prerequisites for intra cloud sync: a gMSA on a domain-joined VM, a non-guest intra ID account with hybrid identity administrator rights, and Windows server 2016+.

Install and configure the Entra cloud sync agent on a member server to bridge on-premises Active Directory with Entra ID, enabling password hash sync and OU-level scoping.

Enable Azure AD Domain Services in the portal by provisioning a dedicated subnet in a virtual network and configuring a custom domain, Azure AD Administrators Group, and synchronization scope.

Learn how to join a windows vm to azure ad ds, verify connectivity, configure vnet subnets, and use ad administrator credentials to manage the domain remotely.

Learn to administer an Azure AD DS managed domain remotely using RSAT tools for Active Directory Domain Services, DNS, and Group Policy, with domain controllers hosted by Microsoft data centers.

Delete the Azure AD Domain Services managed domain to permanently remove its data, causing machines to lose trust, while ensuring the Azure AD and on-premises directories remain unaffected.

Demonstrate how to perform a hybrid Azure AD join for Windows devices, apply on-premises group policies via Intune, and configure Azure AD Connect synchronization.

Explore Azure AD B2B collaboration and B2C identities, including tenant setup, app registration, user flows, and authentication with Facebook and Google as identity providers, plus OTP support.

Azure AD B2C explains how it acts as a customer identity provider, enabling sign up and sign in with social or local accounts, with customizable branding and user flows.

Create and manage an Azure ad b2c tenant in the azure portal, separating it from your default directory to support customer-facing sign-ins with social accounts and app registration.

Register a sample web app in Azure AD B2C, link your subscription to the B2C directory, configure redirect URI, and enable OpenID and offline access with the implicit grant flow.

Create and test a user flow in an application, configuring signup and sign-in, profile edits, and password reset with Azure AD B2C tokens and customizable claims.

Register an Azure AD B2C application, configure Facebook as an OpenID Connect identity provider, obtain app IDs and secrets, and update user flows to enable and test Facebook sign-in.

Azure ad B2B collaboration enables external partners to access your applications via shadow accounts, authenticated by their own identity providers, while you enforce conditional access and multifactor authentication.

Explore the types of guest accounts in B2B and how implicit trust with external Azure Active Directory and Microsoft accounts enables seamless authentication, including shadow accounts and token flow.

Explore three methods to invite external users for B2B collaboration in azure active directory, assign apps, and manage access via guest or shadow microsoft accounts.

add google as an identity provider for b2b guests by configuring oauth client credentials in google console, setting redirects to azure ad, inviting gmail users, and authenticating via google.

Enable email one-time password authentication for B2B guests in Azure AD. Sign in with OTP for non-federated users without Microsoft accounts; OTP lasts 30 minutes and requires appending tenant ID.

Celebrate completing the course and reflect on your learning experience, and consider rewatching the material if you still have doubts. Thank you for being a student; please leave a review.