Windows Azure Active Directory Delivers single sign-on (SSO) for Cloud Services by Richard Qi

Well, there are a lot of great Cloud Services out there that organization can leverage today. Two typical examples are Office 365 and Windows Intune. Both are great public cloud services that can bring huge benefits to different business. While using these services,  you would want to provide a Single Sign-On (SSO) experience to the end users.

That is where Windows Azure Active Directory comes in. Windows Azure Active Directory allows you to deliver that SSO experience for Cloud Services. Below diagram illustrates how Windows Azure AD helps to integrate into different Cloud Services.

Here comes the fun part, how to configure the AD to integrate with Windows Azure Active Directory ? Below diagram illustrates the architecture of setting up a single forest integration.

It looks simple. When you get your hands dirty, you will notice it is not that straight forward to configure this.

Luckily one of our fellow Evangelist David Tesar created a step by step guide and most importantly a PowerShell script to configure this from Zero to end state.

The step by step deployment guide can be found at

PowerShell scripts to configure this end to end

Related Posts

One Response to “Windows Azure Active Directory Delivers single sign-on (SSO) for Cloud Services”

  1. Thuan Soldier

    That’s great recap. We don’t need necessarily have AD FS proxy. It, however, is strongly recommended in order to fill the gap of security risk throughout the internet connection.

    Thanks for sharing Richard!



Leave a Reply