Azure

Introduction to Windows Hello

Leave a Comment

Windows Hello Business With Windows 10 only, Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN. Windows Hello addresses the following problems with passwords: Strong passwords can be difficult to remember, and users often reuse passwords on multiple sites. Server breaches can expose symmetric network credentials (passwords). Passwords are subject to replay attacks. Users can inadvertently expose their passwords due to phishing attacks. Windows Hello […]

Read More →

AD Connect

Introduction to Seamless SSO

Leave a Comment

Password Hash Synchronization or pass-through authentification allow users to use same user name and password to log in to cloud applications but this is not a “Seamless” access. Even they are using same user name and password, when log in to Azure workloads it will prompt for password. Azure AD Seamless SSO automatically signs users in when they are on their corporate devices connected to your corporate network. When enabled, users don’t need to type in their passwords to sign in to Azure AD, and usually, even type in their […]

Read More →

AD Connect

Introduction to Azure AD Connect

Leave a Comment

Azure AD Connect Azure AD Connect is the tool you install on your on-premise server to integrate your on-premises directories with Azure AD. In addition to directory synchronization, Azure AD Connect provides a wizard-driven experience with two modes Express or Customized for configuring your Azure AD authentication settings and other features.   Features Filtering is used when you want to limit which objects are synchronized to Azure AD. By default all users, contacts, groups, and Windows 10 computers are synchronized. You can change the filtering based on domains, OUs, or attributes. Password […]

Read More →

AD Connect

Azure AD Connect – How to connect your Active Directory Domain to Azure AD ? – Part 2 | Pass-through Authentication

Leave a Comment

Azure Active Directory (Azure AD) Pass-through Authentication allows your users to sign in to both on-premises and cloud-based applications using the same passwords. This feature provides your users a better experience – one less password to remember, and reduces IT help desk costs because your users are less likely to forget how to sign in. When users sign in using Azure AD, this feature validates users passwords directly against your on-premises Active Directory. The user tries to access an application, for example, Outlook Web App. If the user is not […]

Read More →

AD Connect

Azure AD Connect – How to extend your Active Directory Domain to Azure AD ? Part 1 | Password Hash Synchronization

Leave a Comment

The simplest way to enable authentication for on-premises directory objects in Azure AD. Users can use the same username and password that they use on-premises without having to deploy any additional infrastructure. With PHS, hashes of user passwords are synchronized from on-premises Active Directory to Azure AD, allowing Azure AD to authenticate users with no interaction with the on-premises Active Directory. When passwords are changed or reset on-premises, the new password hashes are synchronized to Azure AD in near real-time so that your users can always use the same password […]

Read More →

Azure

AAD – Azure Cloud-based SSO Authentification

Leave a Comment

Cloud-based users Authentication or Azure AD Single Sign-on with Password Hash Sync   This means enable the user to signed in with an Azure Active Directory account to a 3rd party SaaS application in Azure only. Azure AD collects and securely stores the user account information and the related password. Azure AD can support any cloud-based app that has an HTML-based sign-in page. By using a custom browser plugin, AAD automates the sign-in process via securely retrieving application credentials such as the username and the password from the directory, and […]

Read More →

Active Directory Federation Services

ADFS – How-to federate with a customer

Leave a Comment

What is ADFS ? It’s a web service that authenticates your users to Active Directory while also simultaneously providing them access to some claims-aware application (i.e. Office 365). Many times, these applications are typically used through the client’s web browser. The applications can be on-premises, off-premises, or even hosted by other companies. It doesn’t really matter where these applications live, who owns them, as long as they can accept a token with claims. ADFS is an identity access solution that provides client computers (internal or external to your network) with […]

Read More →