Microsoft Entra ID
- Cloud-based identity and access management service (formerly Azure AD).
- Supports authentication, SSO, application management, and device management.
- Provides B2B and B2C identity capabilities.
- Conditional Access policies control access based on signals like location, device, and risk.
Authentication & Authorization
- Authentication verifies who you are; authorization determines what you can do.
- MFA adds a second verification factor beyond passwords.
- Passwordless authentication options: Windows Hello, FIDO2, Microsoft Authenticator.
- RBAC assigns permissions to users, groups, or service principals at various scopes.
Exam Cues
- Need SSO across multiple apps? Microsoft Entra ID.
- Need to control access based on conditions? Conditional Access.
- Need to restrict what users can do with Azure resources? RBAC.
- Need external partner access? B2B collaboration in Entra ID.
Practice Identity Questions
Put your knowledge to the test with practice questions.