{"id":1583,"date":"2013-03-04T08:13:20","date_gmt":"2013-03-04T17:13:20","guid":{"rendered":"http:\/\/www.cloudidentity.com\/blog\/?p=1583"},"modified":"2013-03-04T22:25:20","modified_gmt":"2013-03-05T07:25:20","slug":"managing-windows-azure-ad-from-the-windows-azure-portal-2-explore-the-directory-features","status":"publish","type":"post","link":"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-2-explore-the-directory-features\/","title":{"rendered":"Managing Windows Azure AD from the Windows Azure Portal 2&ndash; Explore the Directory Features"},"content":{"rendered":"<p>Here there\u2019s the second of three super quick visual guides about playing with the new Windows Azure Active Directory features in the Windows Azure portal. Please make sure you read <a href=\"http:\/\/blogs.msdn.com\/b\/windowsazure\/archive\/2013\/03\/04\/more-identity-and-access-management-improvements-in-windows-azure.aspx\">Alex\u2019s announcement <\/a>and watch Abhishek\u2019s video first! Also, you should read the <a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-1-sign-up-with-an-organizational-account\/\">first post<\/a> of the series first.<\/p>\n<p>I\u2019ll try to keep the word count down, and let the screenshots speak! Hopefully this will entice you to try things yourself, and provide some reassurance if you are going through the process and get stuck. Note, I didn\u2019t work at all on this great feature! All the credit goes to the UX and directory teams, who did a super job here. I just went through the following steps as any other customer would, and took screenshots along the way.<\/p>\n<p>I broke down things in three posts:<\/p>\n<ol>\n<li><a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-1-sign-up-with-an-organizational-account\/\">The first post<\/a> shows you how to sign up for a new Windows Azure subscription using an organizational account from an existing Windows Azure Active Directory tenant (e.g. your existing directory from an Office 365 subscription, etc). This option is actually not new, it was already available to you few weeks ago. I captured it anyway to give you a full end-to-end walkthrough with coherent names &amp; screens.<\/li>\n<li><strong>This post <\/strong>will go through the main directory management features offered by the portal<\/li>\n<li><a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-3-add-a-co-admin-use-2fa\/\">The third post<\/a> will demonstrate something really really cool: we\u2019ll create a new directory user, make it a global admin in the directory, and a co-admin in the Windows Azure subscription. Then\u2026 we\u2019ll configure that account to enforce phone-based additional authentication factor when accessing the portal <img decoding=\"async\" class=\"wlEmoticon wlEmoticon-smile\" alt=\"Smile\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/wlEmoticon-smile3.png\" \/> pretty awesome, eh? Spoiler alert: there will be pictures of my phone.<\/li>\n<\/ol>\n<p>Ready? Let\u2019s pick things up where we left them.<\/p>\n<p>&nbsp;<\/p>\n<p>Click on the directory\u2019s entry.<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image16.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb16.png\" width=\"604\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>Here you move one level deeper in the UI (note the big arrow on the top left corner) and gain access to the directory features. The first one, as you might expect, is the suer management. Let\u2019s click on one random user in my small crew:<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image17.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb17.png\" width=\"604\" height=\"566\" border=\"0\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Pretty standard user management options, right? Click on the highlighted arrow to go out, and click on \u201cdomains\u201d.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb18.png\" width=\"604\" height=\"740\" border=\"0\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>You use this option to register your domains with Windows Azure AD. The process is simple: you start with specifying your domain\u2026<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image18.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb19.png\" width=\"604\" height=\"732\" border=\"0\" \/><\/a><\/p>\n<p>\u2026click add, then click on the \u201cnext\u201d arrow\u2026<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image19.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb20.png\" width=\"604\" height=\"734\" border=\"0\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>\u2026and you\u2019ll get instructions (with helpful links) on how to verify that you actually own the domain. I didn\u2019t go through it with mine, but you can find the process well documented.<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image20.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb21.png\" width=\"604\" height=\"742\" border=\"0\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>If you just come out of the preceding dialog, you\u2019ll see that Windows Azure AD remembers the domain you added but warns you that it is not verified yet.<br \/>\nClick on directory integration to conclude our quick visit.<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image21.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb22.png\" width=\"604\" height=\"737\" border=\"0\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Here you can find instructions and controls for setting up directory synchronization with your local active directory, if you choose to set integration up. Very handy!<\/p>\n<p><a href=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image22.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"image\" alt=\"image\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/image_thumb23.png\" width=\"604\" height=\"737\" border=\"0\" \/><\/a><\/p>\n<p>That concludes our quick tour of the main Windows Azure AD features in the Windows Azure portal. But wait, there\u2019s more! How would you like to protect access to your Windows Azure subscription with multiple authentication factors? What if you could achieve that simply by using what is already in your admin\u2019s pockets? If you are curious, <a href=\"https:\/\/www.cloudidentity.com\/blog\/2013\/03\/04\/managing-windows-azure-ad-from-the-windows-azure-portal-3-add-a-co-admin-use-2fa\/\">read on<\/a>&#8230; <img decoding=\"async\" class=\"wlEmoticon wlEmoticon-smile\" alt=\"Smile\" src=\"https:\/\/www.cloudidentity.com\/blog\/wp-content\/uploads\/2013\/03\/wlEmoticon-smile3.png\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here there\u2019s the second of three super quick visual guides about playing with the new Windows Azure Active Directory features in the Windows Azure portal. Please make sure you read Alex\u2019s announcement and watch Abhishek\u2019s video first! Also, you should read the first post of the series first. I\u2019ll try to keep the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1571,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1583","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/1583","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/comments?post=1583"}],"version-history":[{"count":4,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/1583\/revisions"}],"predecessor-version":[{"id":1634,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/posts\/1583\/revisions\/1634"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/media\/1571"}],"wp:attachment":[{"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/media?parent=1583"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/categories?post=1583"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudidentity.com\/blog\/wp-json\/wp\/v2\/tags?post=1583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}