Summary

This chapter dived into the process of assigning access rights to users and groups by using Azure AD dynamic groups. You will now be able to configure dynamic groups, membership rules, and rules syntax for more advanced rules. You also learned how SSPR and MFA can provide authentication security within a Microsoft 365 environment, as well as how these services can be enabled via the combined registration portal.

Additionally, the principles of external user access to Azure AD with B2B users were covered, and finally, you learned how to plan for the available device authentication methods within Azure AD.

The next chapter focuses on Azure AD Conditional Access policies and how they can be used in conjunction with features such as MFA to promote compliance.