Azure Active Directory

A cloud-based identity and access management service from Microsoft that allows the management of Non-Human Identities (NHIs).

Description

Azure Active Directory (Azure AD) is a comprehensive identity management solution offered by Microsoft that facilitates the secure management of both human and non-human identities. Non-Human Identities (NHIs) refer to identities that are not associated with human users, such as applications, services, and devices. Azure AD provides a unified platform to manage these NHIs, enabling organizations to control and monitor access to resources efficiently. With Azure AD, NHIs can authenticate and authorize access to various cloud services, ensuring that only legitimate applications and services can interact with sensitive resources. The service supports various authentication protocols and offers features like conditional access, which enhances security by enforcing policies based on user location, device state, and risk level. Additionally, Azure AD integrates seamlessly with numerous Microsoft services and third-party applications, making it a vital component in modern cloud-based architectures for organizations looking to secure their digital assets while enabling automation and integration of services.

Examples

  • An application using a service principal to authenticate to Azure resources.
  • A virtual machine configured with a managed identity to access Azure Key Vault.

Additional Information

  • Supports both OAuth 2.0 and OpenID Connect protocols for NHIs.
  • Enables role-based access control (RBAC) to manage permissions for non-human identities.

References