Azure AD is a Microsoft-managed, cloud-based, and multi-tenant directory service. It can be used in a cloud-only infrastructure or in a hybrid infrastructure. When used in a hybrid infrastructure, it allows us to use the same identities so that we can work with resources on-premises and in the cloud. It extends local AD infrastructure functionalities to the cloud.

In this chapter, we learned what an Azure AD Domain Service is and what its capabilities are. We also looked into the different types of sign-in options that we can use in a hybrid setup, including password hash synchronizations, pass-through authentication, and SSO. After that, we looked at a step-by-step guide for integrating our on-premises directory service with Azure AD. In this chapter, I was only able to demonstrate a very limited number of features and capabilities of Azure AD. For more Azure AD-related...