Skip to content
  • Blog
  • Events
  • Help
  • Careers
  • Contact
New Signature
  • About
      • Company

        Cognizant Microsoft Business Group is dedicated to changing the way businesses innovate, transform and run based on a unique cloud operating model. You will now be redirected to our new microsite to learn more.

        View Company

      • Awards

        As a company, we are regularly recognized within the IT industry as well as the communities we serve.

        View All Awards
      • News

        Read the most up-to-date corporate announcements, Microsoft technology updates, innovative business solutions and learn more about how the Cognizant Microsoft Business Group can take your business even farther.

        View News

      • Partners

        New Signature works with a number of outstanding technology companies to deliver the best experiences to our customers.

        View Partners
      • Leadership

        Cognizant Microsoft Business Group’s executive team is comprised of innovative leaders with proven experience and deep industry expertise. You will now be redirected to our new microsite to learn more.

        View Leadership

      • Industries

        Our solutions are tailored to empower organizations across a wide range
        of industries.

        View Industry Experience
    Close
  • Solutions
      • Intelligent Enterprise
        Solutions

        Going Digital
        Unleash cloud capability, deliver change and compete at speed with a Microsoft digital operating model, enabling you to work more efficiently as you transform your IT environment. Learn More

      • Featured Solution

        Secure Cloud
        In a world of constant threat, ensuring that your underlying cloud platform is protected is the first step on your organization’s journey towards a secure, compliant operating environment. Learn More
      • Intelligent Workplace
        Solutions

      • Secure Workplace

        Work Anywhere

        Endpoint Health

        Identity Health

        Teamwork Support



        VIEW WORKPLACE SOLUTIONS
      • Intelligent Cloud
        Solutions

      • App Factory

        Azure Accelerator

        Azure Launchpad

        Azure Launchpad for DevOps

        Application Health

        Platform Health

        VIEW ClOUD SOLUTIONS
    Close
  • Services
      • Begin your journey towards becoming a digital business with GO, our unique end-to-end framework based on the Microsoft Cloud Adoption Framework.

        GO DIGITAL OPERATING MODEL
      • Intelligent Enterprise

      • Consulting

        We go beyond just technology to help your organization understand how digital can help you uniquely differentiate and better serve your employees and customers.

        VIEW ENTERPRISE SERVICES
      • Intelligent Workplace

        • Identity

          Identity is your new first-line-of-defense. It’s vital to your users and clients that your identity platform is properly configured and secured.

          Endpoint

          Whether your devices are on-premises or remote, personal or business-owned, we can ensure they are properly managed and protected.

          Teamwork

          Today’s workforce is collaborating than ever before.  We can empower your current teams with tomorrow’s progressive technologies.

          VIEW WORKPLACE SERVICES
        • Intelligent Cloud

          • Platform

            The cloud is no longer some future-state. It’s the here and now. Adopting a cloud-first platform is one of the best ways to maintain a future-proofed competitive advantage.

            Applications

            We build cloud-native apps and modernize legacy systems with the power of Azure to give your organization a competitive edge.

            Data

            We can help your organization create secure, scalable data platforms to deliver simpler and more sophisticated insights to your business.

            VIEW CLOUD SERVICES
        Close
      • Client Stories
          • Case Studies

            Browse a comprehensive list of companies who have created successful partnerships and experienced transformative solutions with New Signature.

            View All Case Studies

          • Featured Case Study TalkTalk Modern Workplace

            New Signature worked with TalkTalk to define a new Modern Workplace solution based on Microsoft 365, which kept the user firmly at the center of the transformation.
            View Case Study

          • Testimonials

            We love transforming our customers businesses, take a look at what they have to say about New Signature.

            View Testimonials

          • Featured Testimonial Davis Construction

            With New Signature’s help, Davis was able to take a progressive step forward by migrating their private branch exchange (PBX) phone system to a Voice of Internet Protocol (VoIP) system.
            View Testimonial

        Close
      • Explore
          • Guides & Ebooks

            Dive deeper into education with your team by leveraging our expert-developed guides and eBooks.

            View All Guides & Ebooks

          • Infographics

            Rich with statistics and information, our infographics are great tools for quick but insightful learning.

            View All Infographics
          • Podcast: Office Explorers

            Join Kat and Rob monthly as they chat with New Signature experts and explore the world of O365.

            Listen to Podcasts

          • Videos

            Visit our videos stream to access recorded webinars, service information and to learn more about us.

            WATCH ALL VIDEOS
          • Flyers

            Searching for information about our services? Our flyers are a great takeaway for all those details.

            VIEW ALL FLYERS

          • Featured Stream

            Learn more about the tooling and expertise required to unlock productivity and mobilize your teams.

            MODERN WORKPLACE
        Close
        Close
      Blog

      From AD to Azure AD – Your Hybrid Identity Journey

      New Signature / Blog / From AD to Azure AD – Your Hybrid Identity Journey
      April 16, 2020April 15, 2020| Troy Micka

      For the last twenty years, if you ran a Windows network then you generally used Active Directory to handle your authentication and authorization for users and computers. Historically, this design model has worked well in the four walls of the business and when networks were managed and controlled by the organization’s IT department. As the demands for businesses to go faster, do more and reduce costs have driven businesses to adopt mobile-first and cloud-first mentalities, the design model for Active Directory falls short of where business needs are headed. If Active Directory alone cannot solve this problem what solution should you use?

      Identity is the new control plane!

      What is Hybrid Identity?

      Hybrid Identity represents an identity solution that spans both on-premise systems and cloud-based systems to weave together a common user and system identity for authentication and authorization of resources regardless of location. For Microsoft environments, this solution is Azure Active Directory (Azure AD, AAD) together with Azure AD Connect. Azure AD Connect is Microsoft’s directory integration engine to allow your on-premise Active Directory to communicate with Azure AD.

      Why should I choose Hybrid Identity?

      You might be thinking, “If I’m moving everything to the cloud, then why do I need hybrid identity?” This question often comes up when we don’t remember all the infrastructure that supports our on-premises systems and networks. Those components are all tied back to our Active Directory infrastructure and have been the beating heart of your enterprise identity solution for years.

      When we go to the cloud and begin to leverage Azure AD to create and connect new applications and experiences for our users, we should be careful to avoid creating another silo for identity. A different login for every application leads to headaches at the help desk from an abundance of password resets. One login for multiple applications provides a better user experience. This rotation and lack of uniformity leads to increased help desk calls for password resets because users lock themselves out of systems. At the end of the day humans are not good at managing strong, complex, and separate passwords for different systems.

      But what if we could just use our existing Active Directory identity system and extend it into the cloud in a secure and reliable way. This is where Hybrid Identity solutions come into the picture to help ease this transition and ensure your business stays secure.

      Choosing a path to Hybrid Identity

      Determining which path to take to start your hybrid identity journey can often seem daunting. There are several paths that you can take for starting your hybrid identity journey. As your business grows and changes over time you may find that you move from one path to another. That is ok. No one path is a go-to for all companies and each has their strengths.

      Pass-through Sign On

      Azure Active Directory Pass-through authentication is a relatively new option to the hybrid identity paths offered by Azure AD that went Generally Available at Ignite in 2017. Pass-through authentication is a good fit for organizations wanting to enforce their on-premises Active Directory security and password policies for authentication while also being able to leverage Azure AD. In this model, users that access applications connected with Azure AD will have their authentication request passed through to their on-premises Active Directory for validation via Azure AD Connect and then have their validated session passed back to Azure AD to continue the logon flow. Pass-through sign on allows you to maintain the control you have on your on-premises Active Directory without requiring you to do as much setup as Federation and without requiring you to sync your password hashes to the cloud.

      Federation

      Federation with Azure AD allows organizations with complex authentication scenarios or with applications that are not supported for authentication with Azure AD directly to be able to integrate their identities across both their on-premises Active Directory and their cloud-based Azure AD tenant. The most common and straight forward setup for Federation with Azure AD is by setting up Active Directory Federation Services (ADFS) using the Azure AD Connect wizard through its guided step-by-step process. Federation gives you the most control over your authentication process. but comes with the complexity of managing a federation infrastructure.

      Password Hash Sync

      Password hash synchronization is one of the easiest setup options for hybrid identity when your requirements for authentication and authorization are low. Azure AD Connect synchronizes a hash, of the hash, of a user’s password from your on-premises Active Directory instance to your cloud-based Azure AD instance. Password hash synchronization helps by reducing the number of passwords, your users need to maintain to just one. When a user initiates a logon flow with Azure AD their login information will be validated in Azure AD without having to contact your on-premise Active Directory. Password Hash Sync has the lowest bar of entry to getting started with hybrid identity but also has the least customization options available.

      Want to get started on your Identity journey today? Click here to get the conversation started.

      At New Signature, we’re huge believers in helping companies create more business value through Azure and DevOps. I also believe that to be an effective and high-performing organization, having a strong identity foundation is key to accelerating cloud adoption. From figuring out where to start your Hybrid Identity Journey to initial implementation and beyond, we would love to partner with you along your journey. We’ll set you in the right direction and work with you along the way to ensure a successful transition.

      Categories
      Tips and Tricks
      Contact New Signature

      Managed Services

      Lorem ipsum dolor sit amet, consectetur adipiscing elit. Praesent fermentum, enim ac dignissim aliquet

      VIEW ALL MANAGED SERVICES

      Professional Services

      Lorem ipsum dolor sit amet, consectetur adipiscing elit. Praesent fermentum, enim ac dignissim aliquet

      VIEW ALL PROFESSIONAL SERVICES

      New Signature

      About

      • Company
      • Awards
      • News
      • Leadership
      • Partners
      • Industries

      Solutions

      • Intelligent Enterprise Solutions
      • Intelligent Workplace Solutions
      • Intelligent Cloud Solutions

      Services

      • GO
      • Intelligent Enterprise
      • Intelligent Workplace
      • Intelligent Cloud

      Client Stories

      • Client Stories
      • Testimonials

      Explore

      • Guides & Ebooks
      • Podcasts
      • Flyers
      • Infographics
      • Videos
      Copyright © 2022 New Signature
      • Blog
      • Events
      • Careers
      • Help
      • Anti Slavery
      • Privacy Policy
      • Contact
      • About
        • Company
        • Awards
        • News
        • Leadership
        • Partners
        • Industries
      • Services
        • GO
        • Intelligent Enterprise
        • Intelligent Workplace
        • Intelligent Cloud
      • Client Stories
        • Case Studies
        • Testimonials
      • Technologies
      • Explore
        • Guides & Ebooks
        • Infographics
        • Podcast: Office Explorers
        • Videos
        • Flyers
      • Blog
      • Events
      • Careers
      • Contact
      • Search
      Cookie Settings
      New Signature uses "Required Cookies" to run our website, "Functional Cookies" used by third parties to personalise marketing, including social media features.

      Change your preferences by clicking the “Cookie Settings” link at the bottom of every page. Learn more about cookies in our Cookie Policy and our Privacy Policy. By clicking the “Accept Cookies” button below, you consent to our use of cookies.

      Please note that “Required Cookies” will be set regardless of your consent.
      Cookie SettingsAccept Cookies
      Privacy & Cookies Policy

      Privacy Overview

      This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
      Performance

      Performance Cookies provide Content Delivery Network assets that deliver faster site content delivery capabilities.

      Required

      These cookies are required mainly in order to deliver Multilanguage site capabilities.

      Functional

      Functional Cookies allow us to provided advanced media capabilities including videos, surveys and other multimedia capabilities.

      Disabling Functional cookies will block the playing of videos and other multimedia site components.

      Targeting

      Targeting Cookies are used to capture user information in order for New Signature to deliver better user experiences.

      Save & Accept