Identity

Secure, enterprise ready identity and access management for the cloud

Windows Azure Active Directory

Deliver enterprise ready identity management and access control capabilities for your cloud apps and single sign-on across Windows Azure, Microsoft Office 365, Dynamics CRM Online, Windows Intune and other 3rd party cloud services. For hybrid scenarios, Windows Azure AD integrates with your on-premises AD deployments to provide unified identities and offers full support for third party identity providers.

Use Windows Azure AD to:

Integrate with your on-premises active directory

Quickly extend your existing on-premises Active Directory to apply policy and control and authenticate users with their existing corporate credentials to Windows Azure and other cloud services.

Offer access control for you applications

Easily manage access to your applications based on centralized policy and rules. Ensure consistent and appropriate access to your organizations applications is maintained to meet critical internal security and compliance needs. Windows Azure AD Access Control provides developers centralized authentication and authorization for applications in Windows Azure using either consumer identity providers or your on-premises Windows Server Active Directory

Build social connections across the enterprise

Windows Azure AD Graph is an innovative social enterprise graph providing an easy RESTful interface for accessing objects such as Users, Groups, and Roles with an explorer view for easily discovering information and relationships.

Provide single sign-on across your cloud applications

Provide your users with a seamless, single sign-on experience across Microsoft Online Services, third party cloud services and applications built on Windows Azure with popular web identity providers like Microsoft Account, Google, Yahoo!, and Facebook.

Windows Azure Active Authentication (Preview)

With escalating IT security threats and strengthening regulatory requirements, multi-factor authentication is no longer optional for many organizations. Windows Azure Active Authentication provides a critical second layer of security, in addition to a user’s existing credentials, to authenticate employee, customer, and partner access. Enable Active Authentication for Windows Azure AD identities or build the service into your cloud applications.

Get security AND convenience

Active Authentication safeguards access to your data and applications while addressing user demand for easy, anywhere access. Active Authentication offers a range of authentication options, including phone calls, text messages, mobile apps, and one-time passcodes, allowing users to choose the method that works best for them. Support for alternate methods ensures that users can be reached for authentication every time.

Turn it on for Windows Azure AD

Enable Active Authentication for Windows Azure AD identities, and users will be prompted to set up additional verification the next time they sign in. Use Active Authentication to secure access to Windows Azure, Microsoft Online Services like Office 365 and Dynamics CRM Online, as well as 3rd party cloud services that integrate Windows Azure AD with no additional set up. Multi-factor authentication can be rapidly enabled for large numbers of global users and applications.

Build it into your applications

An SDK enables direct integration with your cloud services. Build Active Authentication phone call and text message verification into your application’s sign-in or transaction processes and leverage your application’s existing user database.