Security
Microsoft Entra ID
A cloud identity and access management solution that authenticates users, controls access to resources, and supports identity-centered Zero Trust security.
Product
Microsoft Entra IDMicrosoft Entra ID provides cloud identity and access management. It authenticates users and workloads, provides single sign-on, supports multifactor authentication, and controls access to applications and resources. It is central to Zero Trust because access decisions can consider identity, device, application, location, authentication strength, and risk, with further capabilities for identity protection, privileged access, and identity governance.
How it works
- Users, groups, devices, applications, and workload identities are represented in a central directory.
- Authentication verifies identities using passwords, passwordless methods, certificates, or multifactor authentication.
- Single sign-on provides controlled access to Microsoft and connected third-party applications.
- Conditional Access evaluates signals and applies access controls based on organizational policy.
- Identity Protection identifies risky users and sign-ins for investigation or automated remediation.
- Identity governance manages access requests, reviews, entitlement lifecycles, and separation-of-duties requirements.
- Privileged identity capabilities reduce standing administrative access and support time-limited elevation.
A problem it solves
An attacker obtains an employee password through phishing and attempts to sign in from unfamiliar infrastructure. Microsoft Entra ID evaluates the request, identifies elevated risk, and applies a Conditional Access policy. The sign-in can be blocked or challenged with stronger authentication before company resources are exposed.