Managing Authentication in Azure AD

In this video we continue to follow the study guide for the new Microsoft MS-102 certification exam (currently in beta). So you can learn M365 and study for a new certification all at the same time!

Important note: This series is not a complete guide to the MS-102 exam guide. Links to further relevant reading are included with each video.

• Configure Windows Hello for Business
• Understand authentication methods - including passwordless and the Microsoft

Authenticator App

• Configure Self Service Password reset (SSPR)
• Setup password protection
• Methods to configure MFA
• Monitoring authentication

When you have completed these steps, you will understand how to manage the

available authentication options included in Azure AD.

Additional resources:

What authentication and verification methods are available in Azure Active

Directory:

[https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods?WT.mc_id=EM-MVP-4039827]

Windows Hello for Business Deployment Overview:

[https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-deployment-guide?WT.mc_id=ES-MVP-4039827]

Windows Hello for Business Cloud-only deployment:

[https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-aad-join-cloud-only-deploy]

Windows Hello for Business Hybrid deployment:

[https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-cloud-kerberos-trust]

How it works: Azure AD self-service password reset:

[https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks?WT.mc_id=EM-MVP-4039827]

Plan an Azure Active Directory self-service password reset deployment:

[https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment?WT.mc_id=EM-MVP-4039827]

Enable users to unlock their account or reset passwords using Azure Active

Directory self-service password reset:

[https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr]

Eliminate bad passwords using Azure Active Directory Password Protection:

[https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad?WT.mc_id=ES-MVP-4039827]

Protect user accounts from attacks with Azure Active Directory smart lockout:

[https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-smart-lockout?WT.mc_id=ES-MVP-4039827]