If you have Windows and Microsort365 or Azure apps, you can dramatically improve the level of security with Microsoft Entra ID!

We manage not only our colleagues but also guest users with Microsoft Entra ID. It is an easy way to manage and access right about online services. A few years ago, we couldn't use our intranet application with public internet. One of the features of Microsoft Entra ID, Application Ploxy makes this possible. Now we can access our intranet applications via the public internet without worrying about security.

Yes, we have both. We use on-premises Active Directory and Microsoft Entra ID with Azure AD Connect. We use both Azure AD Connect Server and Azure AD Connect Service. Because we want to sync our local devices and online groups to local Active Directory. We manage objects over than 200K with 3 Active Directory Servers and 2 Azure AD Connect Servers.

We are always trying to connect between Entra ID and SaaS services. We already connect between Entra ID and all our on-premiss applications with application proxy. Because we can use a conditional access policy if we connect to Entra ID, it's very easy and contributes to improving our application access security levels.

Recently, I found that the multi-factor authentication was improved. I think, Microsoft Authenticator is the best solution when you want to find a multi-factor authentication solution. All user experiences are good, register account, accept multi-factor authentication, manage access to authenticator application. You can control access to authenticator application with Intune.