Chapter 10: Understanding Identity Protection and Management
In the previous chapter, we saw the importance of protecting the identity of users, as users can potentially access cloud services from anywhere with an internet connection.
Traditionally, identity has been managed internally with directory services such as Microsoft Azure Active Directory (Azure AD). When incorporating cloud services into your organization's infrastructure and service portfolio, you'll need to understand how to provide access to those cloud resources. Ideally, you'll want to use a single sign-on (SSO) capability that enables users to authenticate with a single identity across multiple platforms and services.
In this chapter, we're going to talk about the kinds of identity models available, their applications, and some of the ways to protect identity. We will cover the following topics:
- Understanding identity models
- Introduction to multi-factor authentication (MFA) ...