The cloud directory.
WHAT IT IS
The identity and access management service underlying Microsoft cloud products.
WHAT IT HOLDS
Users Groups Devices Applications Policies governing access
WHAT IT IS NOT
The same as on-premises Active Directory.
WHY THAT DISTINCTION MATTERS
They are different products with different concepts, despite the similar name.
WHAT DIFFERS
The cloud directory is flat, without organisational units in the same sense It has no group policy It uses different protocols It is designed for internet-facing authentication
WHAT IT AUTHENTICATES
Microsoft services Third-party applications you connect Your own applications, if you configure them
WHAT THAT MEANS
One identity across everything, with one set of controls.
WHY THAT IS VALUABLE
Access is granted and revoked in one place.
WHAT TO ESTABLISH FIRST
Who your administrators are, and how many.
WHAT TO LEARN FIRST
Users, groups, roles and conditional access.
