Archives for Azure AD - Page 2
Azure AD Connect for syncing AD Groups to AAD
Say you have AD groups and / or AD users that need to be synchronized to Azure AD. This can be from an existing AD on premises or a new…
How does one replace an on premises LDAP server with Azure AD?
Part of the answer lies in ADDS (Azure Active Directory Domain Services). You would create a managed domain with ADDS and configure that managed domain to use LDAP. Need…
SCIM based provisioning of users versus Graph API
Say you had a SaaS product configured as an enterprise App in AAD and wanted to automate the addition / decommissioning of users for that app. There's a few paths…
Microsoft Identity Manager – MIM
MIM can be thought of as the precursor to AAD Enterprise Applications. It enables on premises AD Admins to provide users access to Active Directory and on-premises business applications. By…
Adding an Internal App to MyApps (to AAD) using App Proxy
One is accustomed to going to MyApps to see all their SaaS apps configured. However, even non-SaaS apps, including internal web apps and APIs can be hosted on MyApps. This…
Why move from ADFS to AAD?
Here are some of the reasons you should consider moving away from ADFS to AAD Certificate Management No Planned Downtime as in ADFS changes / updates. AAD Conditional Access -…
Invitation Flows for AAD B2B Users
Invitation flows b2b users AAD B2B users have to be invited. Either via an email invitation or a direct URL link. There are also backdoor mechanisms (powershell and graph API)…
App Visibile in MyApps versus Access to apps
There is a common misconception around AAD apps. If you can see it in myapps, you have access to it - otherwise you do not. This is not entirely true.…
AAD External users (vendors etc) and Office 365 Access
Guest Users (aka B2B Users) These are users that are added as 'Guest' users in your AAD tenant. Some external users ( vendors ) are truly B2B users. For example,…
Query AAD for all members of a group
To query AAD for all members of a group (note that the -All flag does not retrieve all users - try the -Top option instead) Get-AzureADGroupMember -ObjectId "my_obect_id" -Top 200000…