This document provides a technical deep dive into Office 365 and Azure Active Directory Connect (Azure AD Connect). It discusses best practices for planning, designing, installing and configuring Azure AD Connect. Key points include:
- Azure AD Connect is the recommended tool for synchronizing on-premises Active Directory with Azure AD.
- Design considerations include high availability options like staging servers and secondary consoles.
- Installation best practices cover prerequisites, service accounts, SQL options, and express vs custom installs.
- Configuration options include OU filtering, username creation, group filtering, and optional features.
- Advanced configuration covers attribute filtering, custom extensions, multi-geo tenants, and self-service password reset.
This is the Lesson 4 of the "Azure Governance - Free training" serie.
This document presents Azure Policy in-depth and lists all key items you should now when designing your Azure Policy Model.
Finally, the document describes all methods/tools (GUI & CLI) you can use to create, manage and assign Policy (Definition and Initiative Definition) to your Azure environment.
Creating and using a Custom Policies is also detailed on this document.
These are slides from an introductory session for Microsoft Azure done at IIT Sri Lanka giving the students hands-on exposure to Microsoft Azure. Introducing them to Azure App Service and Azure Functions.
This is the Part 1 of the Azure Active Directory Topic. In this session I introduce the Azure AD and talk about what it is, how it differentiates with on-premises Active Directory Domain Services (AD DS). Further, in this session I provide demos on how to create Azure AD Users from the Azure Portal, associate Custom domains with the Azure AD tenant and the Azure AD PowerShell module. As a bonus, I also talk about and demo how to create additional Azure AD directory within the subscription.
This is the Lesson 4 of the "Azure Governance - Free training" serie.
This document presents Azure Policy in-depth and lists all key items you should now when designing your Azure Policy Model.
Finally, the document describes all methods/tools (GUI & CLI) you can use to create, manage and assign Policy (Definition and Initiative Definition) to your Azure environment.
Creating and using a Custom Policies is also detailed on this document.
These are slides from an introductory session for Microsoft Azure done at IIT Sri Lanka giving the students hands-on exposure to Microsoft Azure. Introducing them to Azure App Service and Azure Functions.
This is the Part 1 of the Azure Active Directory Topic. In this session I introduce the Azure AD and talk about what it is, how it differentiates with on-premises Active Directory Domain Services (AD DS). Further, in this session I provide demos on how to create Azure AD Users from the Azure Portal, associate Custom domains with the Azure AD tenant and the Azure AD PowerShell module. As a bonus, I also talk about and demo how to create additional Azure AD directory within the subscription.
Stephane Lapointe: Governance in Azure, keep control of your environmentsMSDEVMTL
June 11th 2018
Azure Group
Subject: Governance in Azure, keep control of your environments.
Speaker: Stephane Lapointe, Azure MVP
It's very easy to lose control over what's happening in your Azure environments. In this talk, see solutions for managing security, costs, and governance. We'll talk about tools like tags, RBAC, policies, Azure Security Center & Azure Advisors to implement initiatives that will greatly help your management in Azure.
Agenda:
What is AAD Connect?
Features provided with AAD Connect
Syncing your on-premises identities using AAD Connect
Setting up AAD Connect
Conclusion
Windows Azure Active Directory presentation will show you how to set up your Azure AD account and how to connect existing ASP.NET MVC Web Application with Azure Active Directory to provide Single-Sign-On
In early 2019, Microsoft created the AZ-900 Microsoft Azure Fundamentals certification. This is a certification for all individuals, IT or non IT background, who want to further their careers and learn how to navigate the Azure cloud platform.
Learn about AZ-900 exam concepts and how to prepare and pass the exam
Azure Role Based Access Control with an use case and explanation about various concepts like Global Administrators, Role Assignments, Account Administrators, Azure Roles, Custom Roles for both Azure AD and Azure Subscriptions
Building an Enterprise-Grade Azure Governance ModelKarl Ots
As presented at the CloudBrew 2019 conference in 13.12.2019.
When proper governance model is followed, your Azure application development teams are operating in a secure and compliant Azure environment during design, development and operations. In this "lessons learned" type of session, Karl will will share practical tips on how to build a comprehensive Azure governance model, based on real-life experiences from working with multi-billion dollar corporations.
After this session, you should have a better understanding of Azure governance best practices and in-house team roles & responsibilities. You will also have an overview of the technical fundamentals of a comprehensive Azure Governance.
Slides for my "Monitoring in Azure" talk at Zühlke Group DevOpsDays 2019 #DevOps #Azure #Monitoring
Demo repository: https://github.com/tknerr/zdod19-azure-monitoring-demo
This is the Lesson 2 of the "Azure Governance - Free training" serie.
This document describes Azure Locks and lists all key items you should now when designing your Azure Lock Hierarchy.
Finally, the document describes all methods/tools (GUI & CLI) you can use to create and apply Azure Locks to your Subscriptions, Resource Groups and Azure Resources.
This document helps you designing your Azure Naming Convention model.
It includes :
> Naming standards rules and restrictions
> Azure Naming Convention Best Practices
> All informations you should you know to successfully create your Azure naming convention model.
In early 2019, Microsoft created the AZ-900 Microsoft Azure Fundamentals certification. This is a certification for all individuals, IT or non IT background, who want to further their careers and learn how to navigate the Azure cloud platform.
Learn about AZ-900 exam concepts and how to prepare and pass the exam
Protect your business with a universal identity platform
The Azure Active Directory (Azure AD) enterprise identity service provides single sign-on and multi-factor authentication to help protect your users from 99.9 percent of cybersecurity attacks.
Gartner named Microsoft a leader in Magic Quadrant 2020 for Access Management
Single sign-on simplifies access to your apps from anywhere
Conditional Access and multi-factor authentication help protect and govern access
A single identity platform lets you engage with internal and external users more securely
Developer tools make it easy to integrate identity into your apps and services
Connect your workforce
Whether people are on-site or remote, give them seamless access to all their apps so they can stay productive from anywhere. Automate workflows for user lifecycle and provisioning. Save time and resources with self-service management.
Choose from thousands of SaaS apps
Simplify single sign-on. Azure AD supports thousands of pre-integrated software as a service (SaaS) applications.
Protect and govern access
Safeguard user credentials by enforcing strong authentication and conditional access policies. Efficiently manage your identities by ensuring that the right people have the right access to the right resources.
Engage with your customers and partners
Secure and manage customers and partners beyond your organizational boundaries, with one identity solution. Customize user journeys and simplify authentication with social identity and more.
Integrate identity into your apps
Accelerate adoption of your application in the enterprise by supporting single sign-on and user provisioning. Reduce sign-in friction and automate the creation, removal, and maintenance of user accounts.
CoLabora - Identity in a World of Cloud - June 2015CoLaboraDK
CoLabora UC User Group Meeting - June 2015.
Topic about: Identity in a World of Cloud - June 2015
Speaker: Jakob Østergaard Nielsen (www.mistercloudtech.com)
Stephane Lapointe: Governance in Azure, keep control of your environmentsMSDEVMTL
June 11th 2018
Azure Group
Subject: Governance in Azure, keep control of your environments.
Speaker: Stephane Lapointe, Azure MVP
It's very easy to lose control over what's happening in your Azure environments. In this talk, see solutions for managing security, costs, and governance. We'll talk about tools like tags, RBAC, policies, Azure Security Center & Azure Advisors to implement initiatives that will greatly help your management in Azure.
Agenda:
What is AAD Connect?
Features provided with AAD Connect
Syncing your on-premises identities using AAD Connect
Setting up AAD Connect
Conclusion
Windows Azure Active Directory presentation will show you how to set up your Azure AD account and how to connect existing ASP.NET MVC Web Application with Azure Active Directory to provide Single-Sign-On
In early 2019, Microsoft created the AZ-900 Microsoft Azure Fundamentals certification. This is a certification for all individuals, IT or non IT background, who want to further their careers and learn how to navigate the Azure cloud platform.
Learn about AZ-900 exam concepts and how to prepare and pass the exam
Azure Role Based Access Control with an use case and explanation about various concepts like Global Administrators, Role Assignments, Account Administrators, Azure Roles, Custom Roles for both Azure AD and Azure Subscriptions
Building an Enterprise-Grade Azure Governance ModelKarl Ots
As presented at the CloudBrew 2019 conference in 13.12.2019.
When proper governance model is followed, your Azure application development teams are operating in a secure and compliant Azure environment during design, development and operations. In this "lessons learned" type of session, Karl will will share practical tips on how to build a comprehensive Azure governance model, based on real-life experiences from working with multi-billion dollar corporations.
After this session, you should have a better understanding of Azure governance best practices and in-house team roles & responsibilities. You will also have an overview of the technical fundamentals of a comprehensive Azure Governance.
Slides for my "Monitoring in Azure" talk at Zühlke Group DevOpsDays 2019 #DevOps #Azure #Monitoring
Demo repository: https://github.com/tknerr/zdod19-azure-monitoring-demo
This is the Lesson 2 of the "Azure Governance - Free training" serie.
This document describes Azure Locks and lists all key items you should now when designing your Azure Lock Hierarchy.
Finally, the document describes all methods/tools (GUI & CLI) you can use to create and apply Azure Locks to your Subscriptions, Resource Groups and Azure Resources.
This document helps you designing your Azure Naming Convention model.
It includes :
> Naming standards rules and restrictions
> Azure Naming Convention Best Practices
> All informations you should you know to successfully create your Azure naming convention model.
In early 2019, Microsoft created the AZ-900 Microsoft Azure Fundamentals certification. This is a certification for all individuals, IT or non IT background, who want to further their careers and learn how to navigate the Azure cloud platform.
Learn about AZ-900 exam concepts and how to prepare and pass the exam
Protect your business with a universal identity platform
The Azure Active Directory (Azure AD) enterprise identity service provides single sign-on and multi-factor authentication to help protect your users from 99.9 percent of cybersecurity attacks.
Gartner named Microsoft a leader in Magic Quadrant 2020 for Access Management
Single sign-on simplifies access to your apps from anywhere
Conditional Access and multi-factor authentication help protect and govern access
A single identity platform lets you engage with internal and external users more securely
Developer tools make it easy to integrate identity into your apps and services
Connect your workforce
Whether people are on-site or remote, give them seamless access to all their apps so they can stay productive from anywhere. Automate workflows for user lifecycle and provisioning. Save time and resources with self-service management.
Choose from thousands of SaaS apps
Simplify single sign-on. Azure AD supports thousands of pre-integrated software as a service (SaaS) applications.
Protect and govern access
Safeguard user credentials by enforcing strong authentication and conditional access policies. Efficiently manage your identities by ensuring that the right people have the right access to the right resources.
Engage with your customers and partners
Secure and manage customers and partners beyond your organizational boundaries, with one identity solution. Customize user journeys and simplify authentication with social identity and more.
Integrate identity into your apps
Accelerate adoption of your application in the enterprise by supporting single sign-on and user provisioning. Reduce sign-in friction and automate the creation, removal, and maintenance of user accounts.
CoLabora - Identity in a World of Cloud - June 2015CoLaboraDK
CoLabora UC User Group Meeting - June 2015.
Topic about: Identity in a World of Cloud - June 2015
Speaker: Jakob Østergaard Nielsen (www.mistercloudtech.com)
Análisis de riesgos en Azure y protección de la informaciónPlain Concepts
Charla impartida en evento Protección y seguridad en entornos de Cloud Hibrida con Azure y O365 sobre Análisis de riesgos en Azure y protección de la información by Plain Concepts
Azure Identity (AD,ADFS 2.0,AAD,ADB2C,OAuth,OpenID,PingID,AD Custom Policies) ,
Azure PaaS (Azure Functions, Serverless computing, Azure Comsos DB, Webhooks, API Apps, Logic Apps, Kudu, Azure Websites), Azure Functions, Lamda Function, Event Functions, Serverless architecture, Implementing azure functions on GIT HUB comment feature, Why Azure Functions, Azure Virtual Machines, Azure Cloud Services, Azure Web Apps & WebJobs, Service Fabric, Consumption Plans, Billing Model, Benefits of Azure Functions, What is serverless, Implementing bigger solutions into smaller azure functions, Microservices, Use cases, Function App, Implementation storing unstructured data using Azure functions into Cosmos DB, Cosmos DB, Custom Azure functions, Azure Cosmos DB, IOTS, Document DB, Doc DB, How to setup a Jenkins build server and automatically trigger code from Visual studio online,Azure App Service, App service Environment, Azure Stack, Managing Azure App services, Azure Powershell, Azure CLI, REST APIS, Azure Portal, Templates, Kudu Console access, Run GIT Commands on Kudu Console, Locking Azure Resources, Configuring Custom Domains, Adding Extensions to Azure Web App/Websites, App service Deployment options, Data Services in Azure , Azure SQL, Azure SQL server, Azure SQL database vs SQL server in a Azure VM, SQL Tiers, DTU, Data Transactional Unit, Planning & provisioning azure SQL databases,Migrating SQL Databases, Azure SQL Server, SQL server transactional replication, Deploy database to Microsoft Azure Database Wizard, DAC package, DAC, SQL compatibility issues, Migrating SQL with downtime, DMA, Data Migration Assistant, Database Snapshot, Migrating SQL without downtime, DTU, Data Transactional Unit, Recommendations for best performance during SQL Import Process, Transactional Replication, T-SQL, Task to implement what ever you learnt till now,
Navigating the Metaverse: A Journey into Virtual Evolution"Donna Lenk
Join us for an exploration of the Metaverse's evolution, where innovation meets imagination. Discover new dimensions of virtual events, engage with thought-provoking discussions, and witness the transformative power of digital realms."
A Study of Variable-Role-based Feature Enrichment in Neural Models of CodeAftab Hussain
Understanding variable roles in code has been found to be helpful by students
in learning programming -- could variable roles help deep neural models in
performing coding tasks? We do an exploratory study.
- These are slides of the talk given at InteNSE'23: The 1st International Workshop on Interpretability and Robustness in Neural Software Engineering, co-located with the 45th International Conference on Software Engineering, ICSE 2023, Melbourne Australia
In the ever-evolving landscape of technology, enterprise software development is undergoing a significant transformation. Traditional coding methods are being challenged by innovative no-code solutions, which promise to streamline and democratize the software development process.
This shift is particularly impactful for enterprises, which require robust, scalable, and efficient software to manage their operations. In this article, we will explore the various facets of enterprise software development with no-code solutions, examining their benefits, challenges, and the future potential they hold.
AI Pilot Review: The World’s First Virtual Assistant Marketing SuiteGoogle
AI Pilot Review: The World’s First Virtual Assistant Marketing Suite
👉👉 Click Here To Get More Info 👇👇
https://sumonreview.com/ai-pilot-review/
AI Pilot Review: Key Features
✅Deploy AI expert bots in Any Niche With Just A Click
✅With one keyword, generate complete funnels, websites, landing pages, and more.
✅More than 85 AI features are included in the AI pilot.
✅No setup or configuration; use your voice (like Siri) to do whatever you want.
✅You Can Use AI Pilot To Create your version of AI Pilot And Charge People For It…
✅ZERO Manual Work With AI Pilot. Never write, Design, Or Code Again.
✅ZERO Limits On Features Or Usages
✅Use Our AI-powered Traffic To Get Hundreds Of Customers
✅No Complicated Setup: Get Up And Running In 2 Minutes
✅99.99% Up-Time Guaranteed
✅30 Days Money-Back Guarantee
✅ZERO Upfront Cost
See My Other Reviews Article:
(1) TubeTrivia AI Review: https://sumonreview.com/tubetrivia-ai-review
(2) SocioWave Review: https://sumonreview.com/sociowave-review
(3) AI Partner & Profit Review: https://sumonreview.com/ai-partner-profit-review
(4) AI Ebook Suite Review: https://sumonreview.com/ai-ebook-suite-review
Custom Healthcare Software for Managing Chronic Conditions and Remote Patient...Mind IT Systems
Healthcare providers often struggle with the complexities of chronic conditions and remote patient monitoring, as each patient requires personalized care and ongoing monitoring. Off-the-shelf solutions may not meet these diverse needs, leading to inefficiencies and gaps in care. It’s here, custom healthcare software offers a tailored solution, ensuring improved care and effectiveness.
Quarkus Hidden and Forbidden ExtensionsMax Andersen
Quarkus has a vast extension ecosystem and is known for its subsonic and subatomic feature set. Some of these features are not as well known, and some extensions are less talked about, but that does not make them less interesting - quite the opposite.
Come join this talk to see some tips and tricks for using Quarkus and some of the lesser known features, extensions and development techniques.
In 2015, I used to write extensions for Joomla, WordPress, phpBB3, etc and I ...Juraj Vysvader
In 2015, I used to write extensions for Joomla, WordPress, phpBB3, etc and I didn't get rich from it but it did have 63K downloads (powered possible tens of thousands of websites).
Innovating Inference - Remote Triggering of Large Language Models on HPC Clus...Globus
Large Language Models (LLMs) are currently the center of attention in the tech world, particularly for their potential to advance research. In this presentation, we'll explore a straightforward and effective method for quickly initiating inference runs on supercomputers using the vLLM tool with Globus Compute, specifically on the Polaris system at ALCF. We'll begin by briefly discussing the popularity and applications of LLMs in various fields. Following this, we will introduce the vLLM tool, and explain how it integrates with Globus Compute to efficiently manage LLM operations on Polaris. Attendees will learn the practical aspects of setting up and remotely triggering LLMs from local machines, focusing on ease of use and efficiency. This talk is ideal for researchers and practitioners looking to leverage the power of LLMs in their work, offering a clear guide to harnessing supercomputing resources for quick and effective LLM inference.
Globus Connect Server Deep Dive - GlobusWorld 2024Globus
We explore the Globus Connect Server (GCS) architecture and experiment with advanced configuration options and use cases. This content is targeted at system administrators who are familiar with GCS and currently operate—or are planning to operate—broader deployments at their institution.
Essentials of Automations: The Art of Triggers and Actions in FMESafe Software
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
We describe the deployment and use of Globus Compute for remote computation. This content is aimed at researchers who wish to compute on remote resources using a unified programming interface, as well as system administrators who will deploy and operate Globus Compute services on their research computing infrastructure.
AI Fusion Buddy Review: Brand New, Groundbreaking Gemini-Powered AI AppGoogle
AI Fusion Buddy Review: Brand New, Groundbreaking Gemini-Powered AI App
👉👉 Click Here To Get More Info 👇👇
https://sumonreview.com/ai-fusion-buddy-review
AI Fusion Buddy Review: Key Features
✅Create Stunning AI App Suite Fully Powered By Google's Latest AI technology, Gemini
✅Use Gemini to Build high-converting Converting Sales Video Scripts, ad copies, Trending Articles, blogs, etc.100% unique!
✅Create Ultra-HD graphics with a single keyword or phrase that commands 10x eyeballs!
✅Fully automated AI articles bulk generation!
✅Auto-post or schedule stunning AI content across all your accounts at once—WordPress, Facebook, LinkedIn, Blogger, and more.
✅With one keyword or URL, generate complete websites, landing pages, and more…
✅Automatically create & sell AI content, graphics, websites, landing pages, & all that gets you paid non-stop 24*7.
✅Pre-built High-Converting 100+ website Templates and 2000+ graphic templates logos, banners, and thumbnail images in Trending Niches.
✅Say goodbye to wasting time logging into multiple Chat GPT & AI Apps once & for all!
✅Save over $5000 per year and kick out dependency on third parties completely!
✅Brand New App: Not available anywhere else!
✅ Beginner-friendly!
✅ZERO upfront cost or any extra expenses
✅Risk-Free: 30-Day Money-Back Guarantee!
✅Commercial License included!
See My Other Reviews Article:
(1) AI Genie Review: https://sumonreview.com/ai-genie-review
(2) SocioWave Review: https://sumonreview.com/sociowave-review
(3) AI Partner & Profit Review: https://sumonreview.com/ai-partner-profit-review
(4) AI Ebook Suite Review: https://sumonreview.com/ai-ebook-suite-review
#AIFusionBuddyReview,
#AIFusionBuddyFeatures,
#AIFusionBuddyPricing,
#AIFusionBuddyProsandCons,
#AIFusionBuddyTutorial,
#AIFusionBuddyUserExperience
#AIFusionBuddyforBeginners,
#AIFusionBuddyBenefits,
#AIFusionBuddyComparison,
#AIFusionBuddyInstallation,
#AIFusionBuddyRefundPolicy,
#AIFusionBuddyDemo,
#AIFusionBuddyMaintenanceFees,
#AIFusionBuddyNewbieFriendly,
#WhatIsAIFusionBuddy?,
#HowDoesAIFusionBuddyWorks
Atelier - Innover avec l’IA Générative et les graphes de connaissancesNeo4j
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Allez au-delà du battage médiatique autour de l’IA et découvrez des techniques pratiques pour utiliser l’IA de manière responsable à travers les données de votre organisation. Explorez comment utiliser les graphes de connaissances pour augmenter la précision, la transparence et la capacité d’explication dans les systèmes d’IA générative. Vous partirez avec une expérience pratique combinant les relations entre les données et les LLM pour apporter du contexte spécifique à votre domaine et améliorer votre raisonnement.
Amenez votre ordinateur portable et nous vous guiderons sur la mise en place de votre propre pile d’IA générative, en vous fournissant des exemples pratiques et codés pour démarrer en quelques minutes.
Climate Science Flows: Enabling Petabyte-Scale Climate Analysis with the Eart...Globus
The Earth System Grid Federation (ESGF) is a global network of data servers that archives and distributes the planet’s largest collection of Earth system model output for thousands of climate and environmental scientists worldwide. Many of these petabyte-scale data archives are located in proximity to large high-performance computing (HPC) or cloud computing resources, but the primary workflow for data users consists of transferring data, and applying computations on a different system. As a part of the ESGF 2.0 US project (funded by the United States Department of Energy Office of Science), we developed pre-defined data workflows, which can be run on-demand, capable of applying many data reduction and data analysis to the large ESGF data archives, transferring only the resultant analysis (ex. visualizations, smaller data files). In this talk, we will showcase a few of these workflows, highlighting how Globus Flows can be used for petabyte-scale climate analysis.
May Marketo Masterclass, London MUG May 22 2024.pdfAdele Miller
Can't make Adobe Summit in Vegas? No sweat because the EMEA Marketo Engage Champions are coming to London to share their Summit sessions, insights and more!
This is a MUG with a twist you don't want to miss.
Globus Compute wth IRI Workflows - GlobusWorld 2024Globus
As part of the DOE Integrated Research Infrastructure (IRI) program, NERSC at Lawrence Berkeley National Lab and ALCF at Argonne National Lab are working closely with General Atomics on accelerating the computing requirements of the DIII-D experiment. As part of the work the team is investigating ways to speedup the time to solution for many different parts of the DIII-D workflow including how they run jobs on HPC systems. One of these routes is looking at Globus Compute as a way to replace the current method for managing tasks and we describe a brief proof of concept showing how Globus Compute could help to schedule jobs and be a tool to connect compute at different facilities.
Need for Speed: Removing speed bumps from your Symfony projects ⚡️Łukasz Chruściel
No one wants their application to drag like a car stuck in the slow lane! Yet it’s all too common to encounter bumpy, pothole-filled solutions that slow the speed of any application. Symfony apps are not an exception.
In this talk, I will take you for a spin around the performance racetrack. We’ll explore common pitfalls - those hidden potholes on your application that can cause unexpected slowdowns. Learn how to spot these performance bumps early, and more importantly, how to navigate around them to keep your application running at top speed.
We will focus in particular on tuning your engine at the application level, making the right adjustments to ensure that your system responds like a well-oiled, high-performance race car.
3. Michael Noel @MichaelTNoel
Authored 20 books including the best
selling SharePoint, Exchange, and
Windows Unleashed series
Presented at over 220 events in over 80
countries around the world
Microsoft MVP, first awarded in 2007
Partner at Convergent Computing in the
San Francisco Bay Area (cco.com)
5. Why Azure AD Connect?
Quite simply, the most effective and
supported method of synching On-Premises
Active Directory with Azure Active Directory
(Office 365’s Directory.)
Simplifies Single Sign On (SSO) to SAAS
applications
Released by Microsoft in 2015, AADC
combines functionality provided by multiple
tools previously
◦ DirSync
◦ Active Directory Federation Services (though
services still required)
◦ AADSync
Runs on a Domain/Workgroup Member
Server, easy to configure
6. Design and Planning – AADC Consoles
For most organizations, single console session will suffice (snapshot backup
config)
For larger organizations or orgs with high SLAs, consider deploying secondary
Azure AD Connect console, but run second console in staging mode. In the
event of an outage, turn off staging mode on secondary server
Recommended to run on domain-joined system inside the network, with
restrictions placed on traffic to MS-defined IP ranges.
Alternatively, if policy dictates, it can be installed on a Workgroup member in
the DMZ, though note that there are a large number of ports required to be
open to domain controllers inside the network.
9. Staging Server
Configuring a dedicated server
as a ‘Staging Server’ is the
preferred failover and DR
option for AADC
A server in ‘Staging Mode’
won’t actually export any
changes to Azure AD, but will
keep information up to date
Failover simply involves turning
off staging mode and running a
full sync
11. Install – Prerequisites and Software
Hardware
◦ 2GB RAM (4GB for 5000+ users)
◦ 1 CPU (2CPU for 5000+ users)
Typically virtual server session
Software
◦ Windows Server 2008, Windows Server 2008 R2, Windows Server
2012, Windows Server 2012 R2, or Windows Server 2016 (preferred)
◦ Download link: http://is.gd/azureadconnect
12. Install – SQL Options
Most organizations install simple SQL Server Express
instance for AADC (SQL 2008 R2+)
Full SQL Server can be used if needing to utilize an
existing farm
AlwaysOn Availability Groups are now supported for
AADC Database failover
13. Express Settings vs. Custom
Small organizations with a single
domain/forest may choose
Express Settings
This does not allow for much
advanced customization, such as
OU filtering, custom service
account, or many other things you
may need
Recommended to choose a
custom install in most cases
14. Install – Custom Service Account
If you don’t choose a custom service
account, MS will create one for you –
This account will start with MSOL_ and
will contain a long GUID name in it.
In addition, MS will attempt to configure
security settings for this account within
the forest, adding root level permissions
Most organizations will likely prefer to
control the creation of this account and
assign it permissions to only those OUs
necessary. Subsequently, a custom
service account that is pre-created is
advised
Rights Required: http://is.gd/aadcsvc
15. Install – Choose SSO Option
Password Hash Synchronization – copies
the internal AD password hashes to the
cloud, allowing for SSO using the same
username/password combo
Pass-through authentication – option
where hash is NOT stored in cloud.
Requires an on-prem agent
Federation with AD FS – Utilizes MS AD
FS for SSO, requires AD FS setup
Federation with PingFederate – New
option, direct integration with Ping
Do not configure – Used if you are using
other 3rd party such as Okta
16. Azure AD Username
Most organizations will use
the User Principal Name
(UPN) to create usernames
in AADC (highly
recommended)
Options exist to choose
other attributes for
usernames, but only use
for fringe scenarios
17. OU Filtering
Highly recommended to restrict AADC
to only sync users within specific Ous
This will keep Azure AD from being
overpopulated with service accounts
and other accounts which may never
need to login to cloud services
This option also allows you to move
objects to non-synched OUs for testing,
migration, or other options.
18. Identifying Users
Source Anchor is a critical
concept in AD
Consider changing the
defaults only in specific
fringe scenarios
ObjectGUID is not longer
the default, MS now defaults
to using Ms-Ds-
ConsistencyGUID as source
anchor
19. Group Filtering
Option exists to filter
out objects from sync
based on membership
in a group
Not a recommended
option except for with
initial testing
20. Optional Features
MS provides for multiple additional options when
configuring AADC
These options can be added at a later time as needed
(such as when enabling Exchange hybrid)
Options include:
◦ Exchange hybrid deployment
◦ Exchange Mail Public Folders
◦ Azure AD app and attribute filtering
◦ Password writeback
◦ Group writeback
◦ Device writeback
◦ Directory extension attribute sync
21. Recommendation: Wait to Sync Until All
Changes Made and Validated
At the end of the steps to the
wizard, the default setting is to
immediately start the
synchronization process
Recommended to wait to sync
until all additional configuration
has been done and you have
tested in staging mode
23. Advanced – Restrict by Attribute
For attribute level synching
restrictions, create an inbound
sync rule from within the
Synchronization Rules Editor
Be sure that your syntax is
accurate.
In this example, it means that we
are EXCLUDING all accounts that
have their employeeID field set to
NULL
NOTE: These settings are
overwritten during upgrades,
ensure that you re-apply settings
after you update AADC.
24. Synchronize Custom Extensions
You may want to add additional fields
from Active Directory to Azure AD. For
example, you may desire to have user
mobile phone numbers synched from
AD DS to Azure AD to allow them to be
used as part of SharePoint Online
profiles
Select which attributes to sync in the
‘Directory Extensions’ portion of the
Azure AD Connect wizard to sync
25. Multi-Geo (Tenants with >5000 Users) –
Preferred Data Location
Allows tenants with greater than 5000 users to store
mailboxes in a preferred MS Datacenter:
◦ Asia Pacific (APC)
◦ Australia (AUS)
◦ Canada (CAN)
◦ European Union (EUR)
◦ India (IND)
◦ Japan (JPN)
◦ Korea (KOR)
◦ United Kingdom (GBR)
◦ United States (NAM)
Must configure sync rules to join custom internal attribute
(i.e. extensionAttribute5 with preferredDataLocation
attribute in AAD.)
See https://is.gd/o365multigeo for details
26. Self-Service Password Reset and
Writeback
Allow your users to reset their
password directly in Office 365 and
have the password synched back to AD
DS
AADC Service Account must be granted
the following rights in AD DS:
◦ Reset password
◦ Change password
◦ Write permissions on lockoutTime
◦ Write permissions on pwdLastSet
◦ Extended rights on either:
◦ The root object of each domain in that forest
◦ The user organizational units (OUs) you want to
be in scope for SSPR
27. Accidental Delete Prevention and
Overrides
By default, AADC will not allow you to delete more than 500 objects during any one sync cycle.
You may need to change this temporarily, though it is recommended to leave it on during normal
operations.
PowerShell commands:
Disable-ADSyncExportDeletionThreshold (Turns off Accidental Delete prevention)
Enable-ADSyncExportDeletionThreshold -DeletionThreshold 500 (Enables Accidental Delete
prevention)
28. GDPR Considerations: Azure AD Connect
Azure AD Connect Server stores the following user privacy data:
◦ Data about a person in the Azure AD Connect database – This is removed automatically when deleting
user from the database. Ensure you are synching at least every 48 hours.
◦ Data in the Windows Event log files that may contain information about a person – Flush event logs on
the AADC Server on a scheduled basis
◦ Data in the Azure AD Connect installation log files that may contain about a person – Script a process
to remove the Azure AD Connect installation logs every 48 hours
NOTE: Do NOT delete the PersistedState.Xml file. It is used for upgrades and does not contain personal
data
Sample PowerShell script to delete installation log files:
$Files = ((Get-childitem -Path "$env:programdataaadconnect" -Recurse).VersionInfo).FileName Foreach
($file in $files) { If ($File.ToUpper() -ne
"$env:programdataaadconnectPERSISTEDSTATE.XML".toupper()) # Do not delete this file {Remove-
Item -Path $File -Force} }
29. Useful PowerShell Commands
Start-ADSyncSyncCycle -PolicyType Delta – Start a manual sync immediately
Start-ADSyncSyncCycle -PolicyType Initial – Perform a full sync…only needed if changing
filtering options, made changes to rule, or added attributes to sync)
Stop-ADSyncSyncCycle – Stop a running AD Sync in order to make changes to config
Get-ADSyncScheduler – View current configuration
Set-ADSyncScheduler -SyncCycleEnabled $false – Turn off sync (set to true to turn back on)
Set-ADSyncScheduler -CustomizedSyncCycleInterval 02:00:00 – Change Sync Schedule to
synchronize every two hours
Add-ADSyncAADServiceAccount – Used to reset the AADC service account’s password
30. mS-DS-ConsistencyGuid – A Warning
Azure AD Connect defaults to using MS-DS-
ConsistencyGuid as the Source Anchor object
This needs to be unique across ALL of Microsoft
Office 365 tenancies
This means that if you are performing
migrations or synching accounts from one forest
to another, be sure to EXCLUDE that attribute
from the sync, or your migrated users will NOT
be able to access their accounts!
32. Azure AD Connect Health
Azure AD Premium Feature
(Requires additional licensing)
Monitor the following:
◦ Azure AD Connect
◦ Azure AD DS Domain Controllers
◦ AD FS Servers
NOTE: Not available in the
Microsoft Germany cloud
33. Install Azure AD Connect Health Agents
on AD DS Domain Controllers
Install AD DS Health
Agents on all domain
controllers to monitor
them from the Azure
AD Health Service
Pay special attention
to the prerequisites,
particularly which
websites need to be
allowed
Agents for AD FS
servers can also be
downloaded