Summary
In this chapter, we have looked at the distinction between authentication and authorization, and the challenges traditional username/password mechanisms present.
We explored Microsoft AD and Azure AD, the differences between them, and how we integrate them through AD Connect, including using AD Connect Health to monitor the connection.
We also saw how Azure provides Security Defaults to provide more advanced options such as MFA, and how through the use of CA we can implement finer-grained controls to tailor and control the user experience.
Finally, we considered the tools available for authenticating external users.
In the next chapter, we will continue this theme and see how we can continue to control the actions our authenticated users can perform through the use of authorization.
