active-directory-playbook-steps.md

Playbook Steps

1. Introduction
2. Ingredients
   • Theme
   • Environment
   • Target Users
3. Implementation
   • Foundation - Syncing AD to Azure AD
     • Extending your on-premises identity to the cloud
     • Assigning Azure AD licenses using Groups
   • Theme - Lots of apps, one identity
     • Integrate SaaS Applications - Federated SSO
     • SSO and Identity Lifecycle Events
     • Integrate SaaS Applications - Password SSO
     • Secure Access to Shared Accounts
     • Secure Remote Access to On-Prem Applications
     • Synchronize LDAP identities to Azure AD
   • Theme - Increase your security
     • Secure administrator account access
     • Secure access to applications
     • Enable Just in time (JIT) administration
     • Protect Identities based on risk
     • Authenticate without passwords using certificate based authentication
   • Theme - Scale with Self Service
     • Self Service Password Reset
     • Self Service Access to Applications
4. Building Blocks
   • Catalog of Actors
   • Common Prerequisites for all building blocks
   • Directory Synchronization - Password Hash Sync (PHS) - New Installation
   • Branding
   • Group based licensing
   • SaaS Federated SSO Configuration
   • SaaS Password SSO Configuration
   • SaaS Shared Accounts Configuration
   • App Proxy Configuration
   • Generic LDAP Connector configuration
   • Groups - Delegated Ownership
   • SaaS and Identity Lifecycle
   • Self Service Access to Application Management
   • Self Service Password Reset
   • Azure Multi-Factor Authentication with Phone Calls
   • MFA Conditional Access for SaaS applications
   • Privileged Identity Management (PIM)
   • Discovering Risk Events
   • Deploying Sign-in risk policies
   • Configuring certificate based authentication