This is the primary built-in authentication and authorization service to provide secure access to Azure resources. A typical federation might include a number of organizations that have established trust for shared access to a set of resources.Īzure Active Directory (Azure AD) is a centralized identity provider in the cloud. The email address will be used during a password reset flow. Users will also be prompted for an email address, which will be verified at sign-up.
Sign-up: Users will be prompted for a username, which will become their login ID. The level of trust may vary, but typically includes authentication and almost always includes authorization. Sign-in: Users are prompted to provide their username and password. This is known as 'federation'.įederation is a collection of domains that have established trust. A commonly used example of this is to federate your on- premises Active Directory environment with Azure AD and use this federation for authentication and authorization.Īs described above, third-party cloud services and on-premises Active Directory can be used to access Azure resources. Authorization to access Azure resources can be provided by other identity providers by using federation.
0 kommentar(er)
