Azure Active Directory documentation

Azure Active Directory (Azure AD) is a multi-tenant, cloud-based identity and access management service.

Overview

What is Azure AD?

What's new

What's new in Azure AD?

Get Started

Secure your remote workforce

Overview

What is verifiable credentials (preview)?

Concept

Azure AD feature deployment guide

Overview

Build resilience into identity and access management

Application management

• What is application management?
• View enterprise applications in your tenant
• Enable single sign-on for an enterprise app
• See more

Application and HR provisioning

• What is application provisioning?
• How application provisioning works
• Plan a cloud HR provisioning deployment
• See more

Authentication

• What is Azure AD authentication?
• Enable self-service password reset
• Enable Azure AD Multi-Factor Authentication
• See more

Cloud sync

• What is Azure AD Connect cloud sync?
• Integrate a single forest with a single tenant
• Install the Azure AD Connect provisioning agent
• See more

Conditional Access

• What is Conditional Access?
• Require MFA for all users
• Common Conditional Access policies
• See more

Device management

• What is a device identity?
• Plan a hybrid Azure AD join
• Plan an Azure AD join implementation
• See more

Domain Services

• What is Azure AD Domain Services?
• Create and configure a Domain Services managed domain
• Administer group policy in a Domain Services managed domain
• See more

Enterprise users

• Create or update a dynamic group
• Manage groups with Azure AD PowerShell (V2)
• Azure AD service limits and restrictions
• See more

External Identities

• What are External Identities in Azure AD?
• What is Azure AD B2C?
• What is guest user access in Azure AD B2B?
• See more

Hybrid identity

• What is hybrid identity with Azure AD?
• Azure AD Seamless Single Sign-On
• Customize installation of Azure AD Connect
• See more

Identity governance

• Manage access to resources in entitlement management
• Create an access review of groups and apps
• Create and manage terms of use
• See more

Identity protection

• What is Identity Protection?
• Configure and enable risk policies
• Remediate risks and unblock users
• See more

Managed identities for Azure resources

• Use a system-assigned identity and Windows VM to access Azure SQL
• Use managed identities on an Azure VM to acquire an access token
• Services that can use managed identities to access other services
• See more

Microsoft identity platform

• What is the Microsoft identity platform?
• OAuth 2.0 authorization code flow
• Register an app with the Microsoft identity platform
• See more

Privileged identity management (PIM)

• Start using PIM
• Activate my Azure AD roles in PIM
• Assign Azure AD roles in PIM
• See more

Reports and monitoring

• What are Azure AD reports?
• Audit logs in Azure AD
• Sign-in logs in Azure AD
• See more

Roles

• Assign Azure AD roles to users
• Administrative units in Azure AD
• Create and assign a custom role
• See more

Third-party applications

• Integrate Azure AD single sign-on with Amazon Web Services
• Configure Workday for automatic user provisioning
• Publish your app to the Azure AD app gallery
• See more apps

Microsoft 365

Explore Microsoft 365, a complete solution that includes Azure AD.

Azure AD PowerShell

Learn how to install and use the Azure AD PowerShell module.

Azure CLI commands for Azure AD

Find the Azure AD commands in the CLI reference.