A cloud-based identity and access management service from Microsoft that allows the management of Non-Human Identities (NHIs).
Description
Azure Active Directory (Azure AD) is a comprehensive identity management solution offered by Microsoft that facilitates the secure management of both human and non-human identities. Non-Human Identities (NHIs) refer to identities that are not associated with human users, such as applications, services, and devices. Azure AD provides a unified platform to manage these NHIs, enabling organizations to control and monitor access to resources efficiently. With Azure AD, NHIs can authenticate and authorize access to various cloud services, ensuring that only legitimate applications and services can interact with sensitive resources. The service supports various authentication protocols and offers features like conditional access, which enhances security by enforcing policies based on user location, device state, and risk level. Additionally, Azure AD integrates seamlessly with numerous Microsoft services and third-party applications, making it a vital component in modern cloud-based architectures for organizations looking to secure their digital assets while enabling automation and integration of services.
Examples
- An application using a service principal to authenticate to Azure resources.
- A virtual machine configured with a managed identity to access Azure Key Vault.
Additional Information
- Supports both OAuth 2.0 and OpenID Connect protocols for NHIs.
- Enables role-based access control (RBAC) to manage permissions for non-human identities.
References
- Securing non-human identities in Microsoft 365 & Azure AD
- Shining the Spotlight on the Rising Risks of Non-Human Identities
- The Complete Guide to the Growing Impact of Non-Human Identities ...
- A Human's Guide to Non-Human Identities (NHIs) - Aembit
- Non-Human Identity Security – Why Now?
- Securing non human identities in hybrid environments - Blogs
- Five steps to securing your identity infrastructure - Microsoft Learn
- Non-Human Identity in the AI Age: A Technical Deep Dive
- What are Non-Human Identities? - OASIS Security