Azure AD is a cloud-based Microsoft-managed multi-tenant directory and identity management service. Even if you do not have on-premises AD integration with Azure AD, if you are using cloud applications such as Office 365, Dynamic CRM, or applications from the Azure marketplace (most of them), you are already using Azure AD in the backend.
There are three main ways which we can handle identities in cloud-only or hybrid environments:
- Windows AD only: It's still a great tool. If you'd still like to manage organization identities only using on-premises solutions, it can be done using one of the following topologies:
- Use site-to-site VPN or Azure ExpressRoute to connect on-premises networks with Azure directly and manage identities using a corporate AD setup.
- Deploy additional domain controllers in an Azure virtual server and replicate on-premises AD changes...