Skip to main content
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft’s cloud-based identity and access management (IAM) service. It provides a centralized, secure way to authenticate users and manage access to Microsoft cloud services such as Azure and Microsoft 365, as well as thousands of third‑party SaaS applications.
Microsoft Entra ID powers authentication and authorization for the Azure portal, Microsoft 365, and integrated SaaS apps. If you sign into Outlook, Teams, or the Azure portal, Entra ID handles the sign-in flow and enforces your organization’s access policies.

​
Why Entra ID matters

  • Single sign-on (SSO): Users sign in once to access multiple cloud apps and services.
  • Multi-factor authentication (MFA): Adds a second verification method to reduce account compromise.
  • Conditional Access: Enforces context-aware policies based on user, device, location, and risk signals.
  • Hybrid identity: Synchronizes on-premises Active Directory identities with cloud Entra ID for seamless access.
  • Self-service and device management: Reduces IT overhead via password reset, device registration, and delegated administration.
  • Extensive integration: Works with popular SaaS providers (Salesforce, Dropbox, Concur) and custom on-premises apps.

​
Core capabilities at a glance

​
Typical authentication flow (example)

  1. A user navigates to the Azure portal or Microsoft 365.
  2. The service redirects to Microsoft Entra ID for authentication.
  3. Entra ID verifies credentials and evaluates Conditional Access policies.
  4. MFA may be required depending on policy or risk signals.
  5. If successful, Entra ID issues tokens that grant access to the requested resource.
This centralized flow ensures access is both seamless for users and enforceable by IT.
A presentation slide titled "Microsoft Entra ID" showing bullet points about cloud-based identity and self-service features on the left. On the right is a circular diagram with a cloud icon connected to icons for devices, SaaS apps, Active Directory, on‑premises applications, and business partners.

​
When to use Entra ID

  • For cloud-first organizations relying on Microsoft 365 and Azure.
  • When enabling SSO and MFA across SaaS applications.
  • To establish secure remote access with Conditional Access.
  • To implement hybrid identity scenarios that bridge on-premises AD with cloud services.
Use these resources to dive deeper into architecture, supported protocols, and best practices for securing identities with Microsoft Entra ID.

Watch Video