Azure SSO Federation

[AlanD]

Perhaps its me...as I get older understanding new things seem to get harder. But I don't understand Microsoft Licencing. And Perhaps I'm mistaken, but I'm not sure our supplier understand it either....and every time I read the lengthy and convoluted descriptions on the internet, often in Microsoft's domain sites....I wonder if Microsoft actually understand it.

 

Anyhow I read

 

If you have a paid subscription to Office 365, Microsoft Dynamics CRM Online, Enterprise Mobility Suite, or other Microsoft services, you have a free subscription to Azure AD. Although you can use Azure AD to create and manage user and group accounts, it's a good idea to you use the Office 365 admin center. For example, even if you can add users in the Azure management portal, you still need to add licenses in the Office 365 admin center. You have to activate your subscription to access the Azure management portal.

 

So we have the usual school agreement - or whatever its now called - (and changing names doesn't help clarify the situation) which as I understand allows us to deploy the latest OS and Office 2016...etc...and with a further free (but you have to order it) subscription we get the full Office 365 with APPs for tablets and downloadable products for users.

 

So Am I correct that this also gives us a free (OK, its not free, but its part of what we pay for) Azure AD capability? And can this be used to provide SSO? Or do we require some extra component/licencing?

 

And to make this work - is it simply a matter of uninstalling our Azure AD connect (..well unless they have changed its name again) and doing what they describe as a special install we then get SSO?

 

Is it also therefore true that we don't then need to do all the routing/certificates and other things that used to be necessary to get Azure AD to communicate with our on-Site AD - because it happens via AD connect?

[markwilfan]

Perhaps its me...as I get older understanding new things seem to get harder. But I don't understand Microsoft Licencing. And Perhaps I'm mistaken, but I'm not sure our supplier understand it either....and every time I read the lengthy and convoluted descriptions on the internet, often in Microsoft's domain sites....I wonder if Microsoft actually understand it.

 

Anyhow I read

 

If you have a paid subscription to Office 365, Microsoft Dynamics CRM Online, Enterprise Mobility Suite, or other Microsoft services, you have a free subscription to Azure AD. Although you can use Azure AD to create and manage user and group accounts, it's a good idea to you use the Office 365 admin center. For example, even if you can add users in the Azure management portal, you still need to add licenses in the Office 365 admin center. You have to activate your subscription to access the Azure management portal.

 

So we have the usual school agreement - or whatever its now called - (and changing names doesn't help clarify the situation) which as I understand allows us to deploy the latest OS and Office 2016...etc...and with a further free (but you have to order it) subscription we get the full Office 365 with APPs for tablets and downloadable products for users.

 

So Am I correct that this also gives us a free (OK, its not free, but its part of what we pay for) Azure AD capability? And can this be used to provide SSO? Or do we require some extra component/licencing?

 

And to make this work - is it simply a matter of uninstalling our Azure AD connect (..well unless they have changed its name again) and doing what they describe as a special install we then get SSO?

 

Is it also therefore true that we don't then need to do all the routing/certificates and other things that used to be necessary to get Azure AD to communicate with our on-Site AD - because it happens via AD connect?

Not sure about the SSO bit but you defo get the free azure AD bit. I use this to provision my office 365 licences using an AD group