Intermediate LevelCloud Computing (AWS/GCP/Azure)
What is Microsoft Entra ID (formerly Azure Active Directory) and how does it manage cloud identities?
❓ Interview Prompt: Explain Microsoft Entra ID (Azure AD), tenant management, SSO, Conditional Access Policies, and RBAC roles.
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management (IAM) service.
Core Functions:
1
Cloud Identity Provider: Provides Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across Microsoft 365, Azure Portal, and custom SaaS apps.
2
Conditional Access Policies: Dynamic security rules evaluating user risk, IP location, and device compliance before granting access (e.g. "Require MFA if accessing from outside corporate network").
3
Azure RBAC Integration: Binds Entra ID users and groups to Azure subscriptions, resource groups, and individual resources.
Code Implementation Example
typescript
// Azure Entra ID Conditional Access evaluation concept
interface EntraConditionalAccessRule {
userGroup: 'Engineering';
condition: 'Location == NonCorporateIP';
grantControls: ['Require_MFA', 'Require_Compliant_Device'];
}💡Microsoft Entra ID Conditional Access Policy rule structure.
🎯 Interview Key Takeaway
Microsoft Entra ID (Azure AD) provides cloud identity management, SSO, and risk-based Conditional Access Policies across Azure.
#Entra ID#Azure AD#Azure Security#IAM#Intermediate
Back to all Cloud Computing (AWS/GCP/Azure) Questions→