This tool is indispensable for organizations with strict compliance requirements, and a need for strong control over their cloud-based users & data across numerous platforms and devices. The SMB now has better options available in the cloud, and I con provide them quicker and more cost-effectively than I ever could on-premises. Previously, security and compliance in the cloud were shaky concepts, at best, and we struggled to provide confident answers to hard auditor questions. We are actually starting to gain some traction: more visibility and control over cloud-based applications through advanced user identity & access tools like this one.
With this product, I feel like we are finally coming out of the “Wild, Wild West” days of the cloud.
MS AZURE VS OFFICE 365 PASSWORD
My favorite features include the advanced security & usage reports, password write-back for enabling self-service password reset, cloud app discovery, and the soon-to-be generally available Enterprise State Roaming and Azure Identity Protection (both are currently still in preview). In my opinion, Azure AD Premium is one of the most exciting Microsoft cloud offerings for the SMB today, next to Office 365.
Enterprise State Roaming* (user profile settings are stored in the cloud and roam with the user to new devices). Azure Identity Protection* (uses machine learning to protect identities based on advanced reporting, monitoring, rules and access policies). Run Cloud App Discovery to uncover unmanaged cloud applications running in your environment. Self-service group & app management (dynamic groups). Azure AD join (join computers and devices to Azure AD). Users can change their own passwords online EVEN with Directory Synchronization enabled (password write-back). SSO for unlimited SaaS apps (and the ability to connect additional apps not present in the gallery). Monitor AD synchronization health in the cloud. The premium features include the following upgrades, some of which are still in preview, highlighted with an asterisk: Company branding for the SSO access panel, etc. Users can reset their own passwords online UNLESS you are using Directory Synchronization–then passwords must be managed traditionally / on-premises. You can enable up to 10 third-party SaaS apps per user from the gallery. Enable basic Multi-factor authentication (MFA). Optionally sync your on-premises directory using Azure AD Connect. Manage users & group memberships in the cloud, and assign licensing. With the standard Office 365-included features, you will be able to: Keep in mind there are new features being released into this service all the time, so this will likely fall out of date quickly. The key question: is it worth it? I tend to think that it is–but let’s take a look at the feature comparison and you can decide for yourself. Yes, the “Premium” licensing does incur extra cost–at the time of this writing you can get premium on it’s own for USD $6/user/month (only through an EA agreement–hopefully that will change), or move into an Enterprise Mobility Suite subscription (EMS) for $8.75/user/month–to light up even more extra bells and whistles (like advanced MDM features and supercharged Rights Management). If you have DirSync or Azure AD Connect enabled, then that means your on-premises user identities and passwords are being synchronized to your Azure Active Directory tenancy in the cloud. I recommend this configuration, especially if you are considering an Azure Active Directory Premium subscription. If you have an Office 365 subscription, then you already rely on Azure Active Directory.
0 kommentar(er)
