Deliver Initials Request with airSlate SignNow

Deliver initials request

so good morning good afternoon and good evening guys based on time zones you all are coming from so guys before we start with the session can you always give me a quick information if you all can see my screen and hear me learning free as well all right so before we get started let me quickly introduce myself to your first so my name is niraj karya and i have been working in this iit industry for more than 12 years now so the main agenda for today's session is we are going to discuss on what exactly is as you add at refers to as your active directory which is properly abbreviated as ad itself so and then how as your ad directory compares to windows or directories and what are different service audiences what are different variations or we can say additions available for as your ad and what are our tenants and then we are going to look at a small hands-on demo on topper as your active directory first of all let's have a quick understanding on what exactly is cloud so if we go back 15 years then at that point of time if we had a requirement of deploying any solution then we have to purchase our own stack of servers we have to take care of the maintenance the setup the drivers the networking components the load balancing the software for hsn updates it means every single component of the entire hardware setup approach maintenance so it's entire scaling application deployment everything had to be taken care by us right and then we have to spend a good amount of time in focusing on deployment as well as we had to also hire multiple individuals in making sure they are able to do the job for us right whereas now if some other vendors they have already done the entire infrastructure setup at their own end and they are now they are allowing us to to use their resources use their infrastructure and deploy our resources onto or deploy our applications on top of it as a part of platform as a service all right and that's why here now we can deploy our solutions that right away for these uh on the servers deployed by these different vendors and then we can use it for storage computation databases migration iot there almost more than hundreds of services that we can use right away without even worrying about setting up a single piece of hardware at our own infrastructure and that's why here we can take care of the entire orchestration the entire service connection of the services one by one so cloud computing is basically we have discussed that it is used for storing data applications or remote servers where you can process the application from servers as well and we can have the access to a data set from anywhere from anywhere around the globe so cloud computing has been discussed so again basically someone else has already done the entire procedure set up at their end and now they allow us to use their resources by using internet or by using a complete lease line connection and azure is the second largest player in the entire market for cloud computing where the first the way the biggest player is aws by amazon amazon web services and then followed by microsoft sjo so seo has been catching up at a good pace so earlier it used to have a market share of around 89 percent and now it is having a market share for 19 percent which is again bound to be increased as soon as we proceed so here we can see all the cloud craft forms so basically we are three main players in the market aws seo and then gcp it was having a market share around 39 percent followed by as you are having a market share of 19 percent and then followed by gcp having a market share of around 11 percent and then there are multiple other vendors also in the market like we have alibaba digital ocean vmware we have multiple players in the market for the same role and basically when we are using seo again we get the freedom to build manage and deploy applications on a massive global network because we don't have to be can we don't have to stay restricted in a given environment in a given region if we have deployed the resources then that can be accessed effectively by any user all around the globe and that exactly is the main advantage that is given by these different cloud computing platforms and here we can use our own data set here if you want to you if you want to define our own infrastructure as a piece here we have a complete control on how much resources we want to use for example when we are deploying any virtual servers then we can choose exact hardware configuration of the servers as well that means what kind of server we want to launch with what capacity and that particular server is going now we can decide if we want to use a shared server or we want to use a dedicated server and then we can start deploying them one by one and that's why these are the main advantages of seo so we have to again we have on-demand provisioning as seen as the same service offered by almost every platform so here we can ask when we say on-demand that means whenever we need to have any kind of resources we can we can have it deployed at any point of time we want and with whatever configurations we want for example we have been using four servers for hosting application and now when the time requires we want to host four additional servers and that too with a specific configuration then we can do that easily by by using the on demand provisioning or servers offered by azure it offers multiple scalability and minutes that means whenever we want to scale up and down the resources we can do that whether we are talking about horizontal scaling or if you want if you are talking about vertical scaling as well and then we have p as you can see that means here we have to pay only for the resources we are using nothing less nothing more that means if we use 50 servers for five hours and then we scrap it that means here we have to pay only for those five hours nothing less nothing more and then we have to work and then we have abstract resources that means here we have to focus only on the application because here it is also offered as a platform as a service so here we can choose exact configuration we want we can for example if let's say if we have a requirement of deploying a just application that means we don't have to set up node.js at our own end we can we don't we simply have to choose environment we can upload a code and right away we don't have to do about we don't have to worry about anything and here we have the efficiency of experts and that means here we get the entire skills knowledge and resources of experts because since we are going to buy the support plan will be having a dedicated support given to us which will be available to us 24 7 to help us out in any kind of issues that we may be experiencing in a live production environment and then it is also measurable that means we can track every resource we can monitor the law records for every activity not just by resources but also by users by using these services all right and again also in case of the global market leader if you compare multiple services with each other then aws has been the global leader in the market there is no doubt in that right so but again if you talk about the entire sla agreement because in terms of communication and yes aws has the most powerful competition services offered by any of the vendors but again in terms of the sla the service service level agreement and specially for enterprise solutions azure has been becoming a good option for the companies to look into and that's why it has steadily increased its market share as compared to other vendors all right all right so now let's move further now let's understand what exactly is as your active dietary so as your active dietary or called as azure ad is basically microsoft multi-tenant cloud psi tree and identity so which is based an entity management service that combines core directory services application access management and identity production in all so just like we have the iam service available in aws where we can define the entire single sign-on server that we have cognito in aws and we want to make sure that we are having a complete control on the entire user accounts that we are going to add we can do that by using microsoft and directory itself all right so if we talk about the now here we have multiple access man for example here we want to grant the access here we want to create that verify we want to define the entire policies for on-premise and we want to contin we want to import all the users at once by then we can also use the microsoft seo active directory and we can move all the solutions all the servers all the policies user groups users groups directly or the cloud platform by using the concept of active dietrichia and that exactly is what we are going to learn as a part of this entire course one by one so azure ad offers a rich standard based platform that enables developers to make sure that they are able to have a complete control to the application based on centralized policy and rules now when we talk about policy and rules let's say we have different requirements we have different group of users one group is only focused on making sure that particular group should be having a complete access or case of full access to the database services or source services then we can define a policy given you are giving that particular access to that group so that whenever any user is going to be added in that particular group that user is already going to have a complete access to all the resources to all to perform any activity on the resources which has been defined in the policy and if you want we can define the policies directly to the users or directly to the group as per the requirement and as in any and even as for the slas even as per the compliances by using this particular ad directory service now if you talk about windows ad that windows had versus as you adapted and windows activated we know that gaming has multiple components available now first of all we have adds now active directory not ad refers the first ad the first initials refers to ad itself which made satellite tree and then ds refers to domain servers now basically these are the code functions in active directory that is responsible for the complete management of users and the entire system itself so that we can allow the system administrators to make to handle the data into logical hierarchies so basically here we offer multiple solutions like we have generating of security certificates single sign-on service like via ssos ldap and right management these are the components available under the drs under the active directory domain service and ls refers to a light directory servicer efforts through the light directory servers here so basically here we have here we choose light id service schema where we make sure we are giving a lightweight access to not again for open specification document itself where we can get service to service authentication by using the ls component whereas if we talk about the fs and fs refers to now adfs refers to active dietary federation services basically where we can run the entire operating system with a single sign on access to and then we can define the entire applications which may be located in other network areas that exactly is what we do by using fsfsfsu the federation services so after dietary federation services all right and then when we talk about the cs component here so again we mean the active directory service we can say now this is basically focus on the certificate services all right so these are basically focus on the certificate services where we can issue and manage all the public key certificates exactly as for the requirement and then at last we have the component of adrms so now when we talk about ad rms here we simply mean to make sure that we are having all the right management services deployed where we can make sure that information right management is again coupled with all the windows servers that we are going to deploy as a part of windows active directory so these are different components available inside the active dietary for windows all right and then if we talk about the entire component if we talk about the entire component for seo then we have bad so that simply refers not bad or we can say windows seo active directory that is called as bad so basically here we can manage all the logins for the active directory from remote or we from we can say from any remote location or any particular device we can do that where we can also define the entire control access to the cloud application by using multiple users devices locations we can have a complete control on that particular access level and these are the pointers that we are going to discuss step by step as we move further now next is we have server audience okay in servers audience uh basically these are these services are mostly used by the id administrators by the application developers and online consumers one by one because eddie and when we talk about the entire entire id administratorship we need to have a complete control on all the accounts and the access level that we can give to every user who is going to be part of this entire as your services or we can says your account that we have created and we do and we do that by using the same ad dietary service same way for all the application developers we need to give them a complete granule control on all the services and for the online customers especially if you're talking about the entire backend dashboard developers who are continuously making updates to the data select for example we have e-commerce solution we can allow the the sellers to continuously update the data set the databases by using the backing that we may have given to them so again we can have complete control on these different user rules as well and if you talk about the entire active directory additions then we have azure active directory basic then we have premium and then we have preview now if we talk about the entire active directory free version here for example if you talk about the free version here then when you're talking about the dietary service then we get up to 500 000 object limit whereas in the active dietary basic and the premium p1 and p2 we both we don't get any we don't have any kind of limitation in terms of object limit we as in terms of user group management where we can add update delete user base provisioning device registration user base access management provisioning basic security usage and group these services are commonly applicable for every edition here but you know whether we are from a basic free or premium p1 and p2 whereas if we talk about single sign-on servers then they have 10 applications per user which is which includes pre integrated sas and developers individual applications same way for basic we have 10 applications per user whereas if you talk about premium p1 and p2 then we don't get any kind of we don't have any kind of limits so we can all use a free basic tiers for cell service app integration templates for free there is no limit there right and then we have self service password change for cloud users it is applicable for all and same way for connecting for syncing engines that extends to optimize directories to azure added battery this is also applicable for all so there's no difference here as well whereas if you talk about premium plus basic features then we have group based access management is only applicable in the premium and the basic version and this is not available in the free version of android directory whereas for self-service parser reset for cloud users company branding the login pages the login pages they access panel customization application proxy and slas these are only available in the basic to premium pvr and b2 versions here whereas if we talk about the premium features which are exclusive to premium it includes self-service group and app management self-service application directory additions and dynamic grouping where we can allow the users we can apply where we can define multiple dynamic grouping in terms of the users roles or access may change and the changing can be done on multiple logic both in terms of the timeline and also on some conditions and then we have self-service password reset change account unlocked with on-premise right back again is offered in the same premium plan then offered under advanced user and advanced usb reporting set and a multi-factor authentication for cloud and on-premise mfa servers and including the entire mime server the cloud app repository over against the discovery the automated password rollovers the connected health and the conditional access these are common for both for p1 and p2 whereas for p2 identity protection and privilege identity management these things are unique to the p2 plan not available for p1 vs if you talk about it like joining the device who has your ad desktop sso microsoft password for azure ad administrator back we can say bitlocker secure recovery then this is available for whereas for mdm auto enrollment self service in bitlocker recovery additional local administrators windows 10 devices via azure and join enterprise safety monk is only available for the premium active directory plan here all right now we have multiple active directory tenants as well so then when we talk about tenants and we simply mean an organization that is at least what we mean by tenants and it is basically a dedicated instance of seo ad directory service that's given to us and then microsoft ensures that each of these tenants is isolated and separate as a part of data lake concepts all right so now now since we have discussed the base of active directory so now let's discuss on the concepts for let's see the hands-on on through which we can get started so let's log into our own active directory here as a part of adobe account now in case you don't have the access guys so we can simply log into our account here by simply typing in portal.seo.com and then based and then we have to enter our credentials and then we can get started in this particular account so now for getting started here we go this is entire dashboard that we are currently looking at and if you want to start creating a new resource then we can click on creator source and here we can see the list of all the available resources offered by seo and that too in different categories for analytics for blockchain computation containers databases developer tools devops identity integration these are multiple services that we have available as a part of azure and we have multiple categories of services that we can that we have to offer and in order to navigate from one service to the other just like we have in aws it's always advisable to go ahead and use the usb search available on top here and again to see the list of all the active directories we can see the service offered by aws by the name of as your active directory so we can open it up now here we can see here we have a list of all the users group external identities administrator units devices app registration identity licenses right now when we talk about app registration then these are multiple use cases this is most widely used as well now app registration is for example if we have been deploying multiple applications in our platform and now we want to give a we will control access to every user to certain applications so that whatever resources have been deployed for that particular application those users or groups are going to be have are going to have the access only for those services nothing less nothing more just like we have a component of tags so we can decide how like the users are going to have the access then how much access we want to give them for different services that we have deployed on top of where's your platform so if you are looking if we have multiple applications deployed then we can register them by using the app registration right all right so now we can do one thing we can start by defining a user first so basically we create an account first and then as just like a company a company creates multiple groups here and again groups are basically the collection of users so basically when a company is in his period it sets the multiple departments it gives the multiple departments the set of permissions so that they don't have any kind of overlapping permissions and for example we want to have if you want to create a group of users who are going to be working on only on databases so we can create a group for database managers and then we can give them the access to only database services if you want to use if you want to create a group of users who are going to work only on the source services then we can give them the access we can create a group that has the policies for giving them access to database services and then we can add the users to those groups so that only that user who has been added to this group for which we have defined the policies they are going to have a full access to the policies supply because they have part of that particular group that's how it is structured in groups same way we have the concept of policies and groups and rules available in aws platform as well in case you haven't familiar with aws so for example if you want to create a new group of users here we can define new group and then we can give the group a name let's say we need now here we can group type is basically on security or for 365 we can define that here we can define the group name let's say we are creating a group for website managers we can get from website managers and then we can give a group description a group description so let's see here we define a small group here group for website managers created in june 2020 and here we can define to create so currently we have a group defined and now if you want to make sure that here we can see the entire group that we had that has been defined here along with the entire membership type that we have structure and now if you want to grab the access to this particular group here we can open the group and then we can define the source the type the object id the creation date and now we want to add define multiple properties for it if you want to define the multiple applications as well for example if you are going to add any applications we can define the applications if you want to give any if you want to define multiple properties for this particular group here we can define that if you want to to attach any kind of administrative units let me suppose if we are going to add the add multiple admins to this particular group here we can go to administrative units as well and then we can start defining them if you want to create multiple membership for example if you want to find a new membership then we can create a new membership and then we can attach that membership here as well if you want to attach multiple licenses so for example if you want to attach licenses here then we can attach those licenses as for the as for this setup by this particular group that we have created and now if you want to attach users for example now once we have the group defined now if we want to attach users to the script we can come out to the default directory and if you want to attach users we can click on users here where we can see the list of all the users that we have currently added into the account and if you want to start adding new users and here we can define add new user as a part of the entire account for seo directory services and here we can choose uh if we want to invite any other users we can invite the user as well for example if you want to invite any users to get on board on this platform we can give the name the email address and then an invitation will be sent to those users to be a part of this entire account or if you want to create any new user policy account here we can define the username let's say if you want to find username here then we can define the name of the user we can choose the password so if we want to use a of our own password we can define that here we can choose a group for example currently this user is not a part of group because we haven't chosen any group here if you want to make sure that this user is a part of the group that we want to define it to then we can choose a group that we want to attach and then we can get started for example if you want to associate if you're looking to associate this to website managers we can choose website managers click on select and then roles now here role speaker defined role is basically this is going to be a user of what kind of different rules we want to attach to this particular group that to this user that we are going to create now these all are pre-configured roles available by seo these all are pre-configured rules that we can choose from for example we want to make this user the application administrator who can work on the app registrations and enterprise applications and we want to make sure that this user is now this user is is only having the responsibility of taking care of the entire billing here so the entire billing related task like updating period information getting the invoices these components can be managed by this particular user or we want that this user should be having the global the access of being a global administrators they're making keep this user goal administrators and it is not mandatory to choose only a single role here we can attach multiple rules as well for example v1 is this is used user should be having the access to billing administrator and the global student as well along with having the access of consumption of power bi from printer for secure for security editor or auditor and for user institute as well so if you want to attach multiple rules we can attach that and then we can define if you want to block the sign in and if you want to block the sign for any specific location here we can find location as well that means users are not going to be allowed to log in from that particular origin and once we are done we can click on create user and this user is going to be created and this user is currently a part of the arctic directory that we have defined for which we can stop now if you want we can log in using this particular user as well we can do that and even after creation of the user we can customize its parameters exactly as for the requirement even after we have done with the creation of the users and if you want to give now these all are pre-configured rules and administration that we can give as a part of azure active directory just like we have pre-configured policies in aws and now if you want to create any custom role for us for our own requirement then we can easily do that by defining a custom goals but remember if you talk about the entire creating a custom rule for that we need we do need the active premium services so for creating our own custom rules here we do need the active servers for premium one plus and p1 and p2 then only we can go ahead and create those different custom rules for us and now if we are looking to divide to define any application that we have deployed here then we can define new application or we can register an application so that we can give the application the type of access that we want or if you want to define from like if you for example if we are going to give multiple sign-on services then we can easily do that by using that particular category of server so we can easily define that and then we have the option for devices where we can register devices that are that we are going to allow the access to or there has been access when you're going for multiple device state environment then we have identity governance so basically here we can make here we can make sure we are able to record the identities for every resource that has that is going to be deployed on top of as your ad account so if you want to define the entire life cycle by automating the requests workflows assignments reviews and expiration we can easily find that by these different policies here and then we can access the reviews as well we can give the entire certification campaigns for sas based platforms we can block the access and then we can delete the accounts as well we can have the entire we can schedule all the access alerts approvals workflows for azure ad and then we get a fire to the rules as well for example let me showcase you if you want to define the entire access package then here we can click on create an access package we can define the name let's say we define the name as erica itself here we have to give them a short description custom access package for all let's do one thing let's define when roll first and then if you want to define a security as well if you'd like for example if you want to find the entire identity protection if you want to allow the conditional access for multiple services then we can easily define these services one by one if you want to apply mfa for example multi-factor authentication then we can navigate to this area for mfa where we can get not nmfa is also a part of the entire app even plan where we can use mfa so mfas are basically multi-factor authentication that we use for making sure that not all the accounts because we don't need to apply mfa for every account we only need to apply mfa for the accounts of the administrators and the root users because these are critical accounts having against a higher level of access given to them so we apply the mfa to these devices so that only those users who are having the access to the keys only they are going to be allowed the access to and if you talk about the entire concept for mfa then let me showcase you that basically authentication is of two types we have two factor authentication and then we have multi-factor authentication we have two types of authentication available we have two types we have two factor and then we have multi-factor observation now in multi-factor authentication two-factor authentication we only need to know the username and then we also need to know the password only the username and the password itself we as in multi-factor application we need to know the username we undergo the username the password and also we need to know the one of the access keys we need to have the access to the access keys now these can be a one-time password these can be the security keys these can be the utf these can be any kind of fingerprint or palm scanners this can be security cards as well so basically the main idea behind multi-pattern authentication is even if someone knows our username now into factor if someone knows our username password then they can get the access to the entire account with much ease whereas in multi-factor application even if they know the username password even if they have the access to the access they know the username password they will not be allowed to gain the access to the account why because they don't have the access to the keys or any kind of rotational base keys so these things they simply make sure we have the entire account secured as a part of multi-factor authentication that we can allocate by using our active directory account so thank you so much for joining guys and have a great day ahead take care bye bye you