Describing architectures and needed changes

In this section, we will describe different architectures including the needed changes in big picture scenarios. In particular, we will discuss the integration of On-Premise applications with the whole authentication and authorization strategy. Furthermore, we start to take the first steps in the hybrid usage of MFA and Azure Rights Management Services (RMS) with typical examples.

Authentication integration

Azure AD provides the capability to integrate On-Premise applications with the Azure Active Directory Application proxy service. To use these capabilities, you just need to install the dependent module, the application proxy connector on your existing Windows Server 2012 R2 Web Application proxy server. With this installation and the necessary configuration, you have taken the first step in this hybrid authentication solution. The following figure shows this scenario to provide you with a better idea about this concept:

Note

The Azure Active Directory...