Supporting Azure Active Directory on legacy products

Question

How do I integrate my fancy new Azure Active Directory in older products that only support classic Active Directory? Is there some local service I can install to translate between the two?

Answer 1

@Not at all Steve Ballmer I would recommend using Azure AD Application proxy to provide SSO for on-premise applications with Azure AD.

Application Proxy works with:

• Web applications that use Integrated Windows Authentication for authentication
• Web applications that use form-based or header-based access
• Web APIs that you want to expose to rich applications on different devices
• Applications hosted behind a Remote Desktop Gateway
• Rich client apps that are integrated with the Active Directory Authentication Library (ADAL)

For more details about how it works and implementation
Ref: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy

Answer 2

Azure Active Directory Domain Services (not Azure AD) would be the service to take a look at. This supports services like SharePoint, as one example, where domain user accounts are required.

Answer 3

you an integrate those with Azure AD App proxy: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-configure-single-sign-on-with-kcd