Microsoft Entra ID Beginner's Tutorial (Azure Active Directory)

Simplify and improve security for sign-in experiences with Microsoft Entra ID, the new name for Azure Active Directory. Microsoft Entra ID is a unified identity provider to sign into your non-Microsoft services, like Google, AWS, Salesforce, and ServiceNow.
See how it's used to manage service licensing for Microsoft 365, Office 365, Enterprise Mobility + Security, and Microsoft Purview. It features unique capabilities like conditional access, passwordless authentication, Single Sign-on, and Dynamic Groups. Perform the most common day-to-day tasks, like adding and editing user accounts, options for groups and what each do, as well as managed identities, role assignment, admin units, and additional core capabilities.
Jeremy Chapman, director of Microsoft 365 and a long-time endpoint management and directory services admin explains the setup and configuration.
► QUICK LINKS:
00:00 - Simplify identity management
01:05 - Consolidate identity services
02:52 - Admin experience
05:09 - Conditional Access
05:39 - Manage user accounts
07:09 - Edit users
08:16 - Dynamic Groups
10:22 - Admin Roles & Admin Units
11:45 - Single Sign-On
12:34 - Wrap up
► Link References
For more information, check out aka.ms/EntraDocs
► Unfamiliar with Microsoft Mechanics?
As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.
• Subscribe to our TH-cam: / microsoftmechanicsseries
• Talk with other IT Pros, join us on the Microsoft Tech Community: techcommunity.microsoft.com/t...
• Watch or listen from anywhere, subscribe to our podcast: microsoftmechanics.libsyn.com...
► Keep getting this insider knowledge, join us on social:
• Follow us on Twitter: / msftmechanics
• Share knowledge on LinkedIn: / microsoft-mechanics
• Enjoy us on Instagram: / msftmechanics
• Loosen up with us on TikTok: / msftmechanics
#EntraID #AzureActiveDirectory #IdentityManagement #AzureAD

[@kevinmulhall1648]

Great video as always - by far the most helpful MS YT channel

[@Andieback]

Great video Jeremy! Perfect pace and duration. Keep ‘em coming 🎉

[@DeployJeremy]

Thanks!

[@Todd19955]

Easy to understand! Thanks!

[@jimmyroels7604]

4K resolution is awesome! I really like it. And great content in the video.

[@Dmitrii-Kalashnikov]

Great! really I love it, it is so user-friendly and convenient 👍

[@rajek8676]

Thanks a lot very informative

[@SyedJunaidurRahmanQadri]

Thanks for great explanation

[@Sarakness]

Thank you!

[@mostaphasaid7250]

thank you very much for this informative video

[@MSFTMechanics]

You are welcome

[@augustbernard3396]

Thank you! Concise, and informative! BTW Bellvue is the name of the psych hospital in New York...not sure if that one was on purpose or not lol.

[@borg_cube]

Very nice video. This can get quite complicated very quickly. Any good planning-documentation for best practices when designing solutions for larger enterprises?

[@ReikiWind]

Awesome

[@MSFTMechanics]

Thank you!

[@jorgenamour1184]

Great video! If I have this scenario: a particular Web system that use Data Lakes, Databricks, and I want to allow log in using microsoft entra ID. Can I use the permissions of the users/groups for the connections to azure data lakes for example? Have you got any information about this? Thanks in advance.

[@ArronLorenz]

Would love to start using it but until Microsoft starts strong arming companies to not get SSO behind high teir packages we won't ever be able to use it.

[@alananderson8619]

At 6:20, when inputting the users' email, I get an error saying the "User Principal Name Already Exists In This Directory." I'm not sure if I should continue with that or not.

[@joshuawiddup7602]

Does this mean once you're using Entra, any previously used username and passwords for other applications will no longer be valid? So, in the case of a data breach of an application (not Entra ID) and credentials are stolen, will they no longer be able to access the application from the hosted login page?
In other words, what happens to all the original usernames and passwords that were needed for the variety for all the other apps?

[@ghidraa9340]

Right.
A user can have a password for an app but SSO will override the login process.
Each user will still require a user/record within an app but the password may not require updating after the initial setup.
Iv set access but i never gave the user’s their passwords because SSO prompt ..override.

[@ILostMyWay]

aad is entra id.. dunno whats the complication is.

[@chrise202]

TL;DR; AAD = Microsoft Entra Id. Yw, gg, wp, ez.