In conclusion, overall, I highly recommend Azure Active Directory for any company looking to streamline their identity and access management processes and enhance the security of their IT systems. While there may be some challenges associated with setting up and configuring the software, the benefits are well worth the investment.

As an administrator of Azure Active Directory in my company, I have found it to be a valuable asset to our overall IT infrastructure. The software offers a range of features that have made our identity and access management processes more efficient and secure. One of the key benefits of using Azure Active Directory is its integration with other Microsoft services, such as Office 365 and Microsoft Teams. This allows for a seamless and secure way for employees to access their work resources, reducing the risk of unauthorized access and simplifying the user experience. Another pro is the robust security features provided by Azure Active Directory, such as multi-factor authentication and conditional access policies. These features have helped us to enhance the security of our IT systems and protect sensitive information from potential threats.

However, there are also a few cons to consider. One issue I have faced is the learning curve associated with setting up and configuring the software, especially for those who are not familiar with Microsoft's IT infrastructure. Additionally, some users have reported challenges with integrating Azure Active Directory with non-Microsoft systems.

Cost was affordable and it provided an easy way to migrate from on prem domain controller to Azure AD. It also integrated with a number of the other SAAS applications we used making setting up integrated authentication easy.

When you move a computer from Joined to a local AD over to Azure AD you lose some of the management options (GPO).

It's simple to use and straightforward, and because it's housed in the cloud, there's rarely any downtime. Groups and users can be created in seconds, and some more complex features, such as conditional access restrictions, make controlling access and implementing multi-factor authentication quite simple. Azure AD aided us in integrating several technologies, managing access, and securing our identities. We suffered from service availability when utilizing Active Directory.

Troubleshooting technical difficulties by the Microsoft team may take some time, and obtaining the appropriate technical help may be challenging. With the dizzying array of permissions available, it might be difficult to determine which one(s) to apply for a specific use case.

Recomended dearly to all buissness to work with Azure ad and especially AD users and managment

Functionality wellWorking fast, easy login, very safeSync with Microsoft products cloud services

Access only from server, rather then cloud based web

I like the main dashboard gives you alerts on upcoming major changes and remediation to avoid service interruptions. There is the seamless integration with on premise Active Directory that makes it easy to sync and migrate. The monitoring blade is great to show access with details on time, user, application, remote IP Address, location and MFA. I also like the separation and ease to create service principals or applications and lock them down to specific roles. I also like the feature of setting accounts as Guest so that you can furter restrict non company users. Overall one of the best ID management solutions for Microsoft shops. Great API and powershell documentation

No compains but I wish more security features that are hidden are brought and promoted in the GUI.

We have noticed a marked skills gap in receiving qualified support engineers. However, in a critical situation, we have found the support chain to be fast moving and very knowledgeable in ways that get the business back to functional in times of urgent need.

Ease of deployment and support from Microsoft is key to a successful deployment in AAD. Making sure you have reached out to AAD Support prior to deploying can make getting to Best Practices much easier in the long run.

There can be a 40,000 league difference from getting a good support engineer and receiving sub par support that takes longer than necessary

We had Office 365 licecnes but were not using them due to being a Lotus Notes environment. Moving off this to Outlook/teams/sharepoint meant having a away to configure users to be able to access these easily. It meant group based sercurity and access, it meant SSO and MFA. All configured easily through AAD.

Being able to sync form my on premise AD means i can configure and provision users in one place and have their details available for M365 applications and powerfull tools such as password self service, MFA and SSO.

There are still some limitations that mane i cannot just have a fully cloud based AD platform. I still need locak AD on a server onnected with Azure AD. Hopefully soon it can go and i can have just the one.

Azure is a very good cloud platform, their UI is really amazing and they have great customer support, always on hand to provide support. The AAD is a great and excellent feature that allows you to manage your organization users, computer etc in cloud. The hybrid feature also allows you easily manage your existing on prem servers. Azure is less complex and very user friendly. I would greatly recommend to any organization looking at onboarding cloud services.

It's a great cloud platform and works well so far. Nothing really comes to mind, i'd greatly recommend

Azure active directory is a must have for any organization with Identity & Access management.

Azure AD helped us integrate lots of solutions and managed access and helped secure our Identities. Service availability was one area we struggled with using Active directory on Prem servers, since we integrates with Azure, it reduced the overhead and the stress managing the on Prem servers

Troubleshooting technical issues by Microsoft team could take some time and getting the right technical support could be difficult sometimes

Comes as part of Office 365 and is so unobtrusive that many will not even realize that they have it. Right now our company is in the process of attempting to better utilize the security features present in Azure

We were able to connect our on-premise Active Directory to the Azure Active Directory, which made setting up and maintaining it a breeze. New users are automatically transferred over and all of our on-premise roles and permissions can be utilized in Office 365. Additionally as long as your have a sing enterprise license you can use AAD for SSO on other applications.

If using Azure Active Directory in hybrid mode it can be a pain to setup two way communication between the cloud and on-premise, though a argument can be made that this is a security feature since it limits what a cracker can accomplish if they get into one of your users accounts.

I have found it very easy to use and convenient. I enjoy the benefits of being able to manage centrally and having all systems visible and clear for me, e.g. I can check in an instant what roles are attributed to a user, what devices the user has and also can help control there being 'scope creep' in terms of users gaining more roles and access. As for the users they are afforded quick and simple access, which doesn't interrupt their workflow or productivity, while still keeping them and the organisation safe.

Microsoft Azure provides a single pane of glass where user provisioning is provided at a high granular level. There is strong authentication that helps safeguard the company's data and assets, while protecting the user from having too much access. Governance is improved through the principle of 'Least Privilege' and 'Segregation of Duty' both followed meticulously and easier to administer. Access is based on a reduced risk model approach, which is at the centre of all administrative decision-making. Azure AD allows access to hundreds and thousands of applications like Box, SAP, Oracle etc. With more companies moving to Cloud Operations, Azure AD is the choice that makes sense. Microsoft also provides great customer service with experts available to help out on different service levels.

If we have an outage and can't conenct to Azure AD as has happened in the past, we lose access to other systems such as Office, Microsoft Teams etc. This can obviously lead to productivity issues.

AAD is our primary access management tool and since our company has a strong SSO policy, newly onboarded applications are strictly managed via SSO only. Permissions and roles assigned to groups and not users to make sure uniform access is provided and periodic review of access management is also done to make sure to revoke unnessary access and all this can directly be done via Azure Active Directory!

1. Integration with on-prem Active Directory and even other access management tools is possible with AAD. 2. Users and groups management with AAD is super easy and even the most complex use-cases can easily be implemented. 3. SSO and SAML capabilities: are stunning. AAD can serve as a SSO identify provider for all your applications that support SSO and every user can simply login with your corporate crendentials.

There are no major flaws, or missing features from AAD. One can easily integrate third-party plugins and tools as well to bring new feature set, if required. Majorly, AAD is the gold standard, therefore, customer service is very proactive and feature sets are added frequently to serve new clients.

All my company employees can access business data through streamline Authentication and Authorization. So every integrated solutions (Cloud and On-Premise) could be managed by Business Owners

It includes all latest security recommandations and best practices

When I use any Microsoft products, I can integrate easily. However, I need specific technical knowledge for other providers products. But, as a SaaS solution, it becomes more and more intuitive, especially for IT and Business Owners

overall i think that AAD is the best user management tool for big organizations, it's high adaptability and range of integrations allow this platform to fit in almos any infrastrucutre

the integration with both AD on premise on google workspace make this tool the perfect paltform for a migration to a cloud based only organization

the interface it's very complex, created by many submenus it can take some times for an admin to get accostumed to it. another thing is that many advanced features are locked behind an additional paywall

we are as a company highly depend on this application to manage day today user creations and multi factor authentications. its cloud based and easy to access from anywhere and it really help me as an IT Administrator. and single sign on SSO is really help to manage all in one place. even you can check the login attempts by users with the location to take actions. granting rights and removing it from user is so easy with this. i highly recommend this app, it will really make your life easy. and the deployment of the rights taking effect to client in seconds which make our IT department look so efficient.

actually i didn't see any drawbacks or any least like areas on this application. this is worth for what you pay.

It's intuitive and easy to use, it's hosted in the cloud so there is rarely any downtime (if ever!). Groups and users can be set up in a matter of seconds and there are some more advanced settings such as conditional access policies, which make restricting access and enforcing multi-factor authentication very straightforward.

Azure AD can be expensive, especially if you have a lot of users and a large infastructure to manage and maintain.

We solved an issue with reporting accurate data on employees' current department and transfer date. With Azure AD connecting with UKG, that data is updated in real-time.

Seamless integration with M365 controlling MFA for employees and our external customer users, and integration with 3rd party apps (UKG, Jira, Jira Service Management, Confluence, Internal Apps)

Being a M365 company, we were locked into going with Azure AD when we added our Azure environment.

I love AAD for its integration into the rest of the O365 & M365 suite. Whilst a business could still get plenty of use with a cloud directory like AAD on its own (and also at like a tenth the cost of the competition), in our environment its integration is insanely useful.

The only thing I can really say *isn't* great about Microsoft is their support. Often times contacting support ends in an endless loop of blame-shifting (if we get a response at all), and I often get much more information on outages and issues from r/sysadmin instead of Microsoft directly. However - the software itself is much better than these issues.

Great, we extensively use both Azure, the Microsoft Stack, Power BI and the Office 365 graph so AAD was a natural fit

Easy to configure, assign roles (or groups) to persons and/or apps. This case be easily reproduced using the API otherwise the front end is just as good.

In terms of the dizzying amount of permissions it can be tricky at times to know exactly which one/s you should apply for a given use case

We have a seemless integration of on-prem windows identities to cloud via this Azure Actively Directory.Totally secure and private environment is provided.

Serverless server is here, irony is that cloud stands for serverless capabilities and still provides server architecture features like Active Directory.Not just that you get many option of acess control and policies to execise of each user. Multiple factor authentication via app, sms and call are available. Admin can also check the location for which the authorization is requested. We can setup custom logo and also we can restrict users to login on untrusted devices. Isn't that the great feature? I love it and totally impressed with the new capabilities.

There are no cons at all. Microsoft is very innovative to develop such a practical usage platform.

Insgesamt ist Azure Active Directory ist ein sehr gut designed Software, mit vielen Möglichkeiten unterschiedlichste Software anzubinden

Es ist sehr schnell, hat viele API Schnittstellen und gute Zugriffsmöglichkeiten

Das es an die Cloud/Internet angebunden ist so das eine aktive Verbindung erforderlich ist

Ease of implementationSupported by most partnersEasy to use

Forget passwordOccasional outages of service worldwide

it's nice and easy way to manage users

- Easy to use - simplified and unified solution for user management - SSO - Identity management

- user synchronization is not so good - very confusing options with same name type

Considering the basic version is included with a Office 365 subscription it has been an unexpected bonus. It has given our company a chance to experiment with a cloud based directory without having to fully abandon the setup that has work for years and most employees are familiar with.

Previous to signing up for Office 365 we used a on-premise active directory, using the tools provide it was easy to transfer our directory information over to the Azure Active Directory and have them work together in a hybrid mode. We have been able to slowly decrease the amount of on-premise servers had transition to cloud only at a pace we control due to this.

If you are using hybrid mode it can be a bit of a pain to set two way communication between Azure back to On-premise.

Well documented, easy to navigate and easy to implement needed solutions.

None really - works as intended and is constantly changed and new features added.