Issue link: https://insights.oneneck.com/i/1463084
Cloud anywhere: Azure for hybrid and multicloud environments 15 • Federated authentication: For companies that cannot support in-the- cloud authentication due to regulatory requirements, Azure AD hands off the authentication process to a separate trusted authentication system, such as on-premises Active Directory Federation Services, to validate the user's password. While this approach is not recommended, the authentication system can provide additional advanced authentication, such as smart-card-based authentication or third-party multifactor authentication—an improvement over strictly on-premises solutions. Integrating your on-premises directories with Azure AD makes your users more productive by providing a common identity for accessing both cloud and on-premises resources. The solution synchronizes on- premises identities with Azure AD, while IT keeps the on-premises Active Directory running with any existing governance solutions as the primary source of truth for identities. Microsoft's Azure AD hybrid identity solution spans on-premises and cloud-based capabilities, creating a common user identity for authentication and authorization to all resources regardless of their location. Hybrid identity also powers application management. Organizations often have hundreds of applications that users depend on to get their work done, with users accessing these applications from many devices and locations. With so many applications and access points, it's more critical than ever to use a cloud-based solution to manage user access to all applications.