What is Microsoft Entra ID?
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft’s central cloud identity service. The service manages user identities, enables Single Sign-On for cloud and on-premises applications, and secures access with Conditional Access and Multi-Factor Authentication.
Core Features
- Single Sign-On for Microsoft 365, Azure and thousands of SaaS apps
- Multi-Factor Authentication with various methods (app, SMS, FIDO2)
- Conditional Access policies for risk-based access control
- Identity Protection with ML-based risk detection
- Privileged Identity Management for just-in-time admin access
Typical Use Cases
- Centralized user management for enterprises with Microsoft 365
- SSO integration for cloud applications and SaaS services
- Zero Trust security with Conditional Access and MFA
Benefits
- Integrated into all Microsoft products
- Hybrid scenarios with on-premises AD
- Extensive compliance certifications
- 99.99% SLA for authentication services
Integration with innFactory
As a Microsoft Solutions Partner, innFactory supports you with Microsoft Entra ID: identity architecture, Conditional Access design, hybrid identity setup and security optimization.
Frequently Asked Questions
What is the difference between Azure AD and Entra ID?
Microsoft Entra ID is the new name for Azure Active Directory. Functionality remains identical, the rebranding emphasizes the expanded identity platform beyond Azure.
Which license do I need for Conditional Access?
Conditional Access requires Microsoft Entra ID P1 or P2. P1 is included in Microsoft 365 Business Premium and E3. P2 additionally offers Identity Protection and Privileged Identity Management.
Can I integrate on-premises Active Directory?
Yes, Microsoft Entra Connect synchronizes users and password hashes from on-premises AD. Alternatively, Pass-through Authentication enables direct authentication against on-premises AD.
How does Single Sign-On work for SaaS apps?
Entra ID supports SAML 2.0 and OpenID Connect. Through the Enterprise App Gallery, you can enable pre-built SSO integrations for thousands of SaaS applications.
