Three of our favorite AAD features are Single Sign-On, Multifactor Authentication, and Self-Service Password Reset. The best part is that these are all available with every level of AAD that is offered – even the free one! Read on to learn a bit more about each of these.
Single Sign-On (SSO)
– When your organization implements SSO, it means that you can take your login credentials for Office365 – generally your email address – and use that same username and password to login to over 1,200 cloud applications like Box, Salesforce, Workday, and many more. Gone are the days of having to remember a separate username or password for every application. Once your organization is set up with SSO, it allows for seamless integration – allowing users to automatically get access to their cloud app account as soon as you’ve provisioned their account in Office 365. The reverse is also true: disabling an Office 365 account because an employee leaves the company results in their access to those third-party applications being immediately shut down as well.
Multifactor Authentication (MFA)
– Multifactor authentication combines something you know (your password) with something you have, like a trusted device that’s not easily duplicated (your phone). This combination safeguards your accounts from unauthorized access and is especially important for administrative accounts like Global Administrators. We strongly recommend MFA be enabled for all users in your organization. To support widespread adoption, Office365 AAD supports a feature called “Modern Authentication” which allows you to use the Office Suite apps you know, like Outlook and Word, with full support for multifactor authentication without having to navigate the cumbersome process of setting up a per-application password.
Self-Service Password Reset (SSPR)
– What if your users didn’t have to call anyone when they forget their password? You’re in luck! You can enable users to reset their own passwords using identity verification via a registered phone number or registered personal email address. This is extremely helpful in reducing frustration and reducing calls to your IT department (or IT person). Combined with SSO, you’ll have a one-stop spot for a user to manage their own access to common work applications. Like MFA, self-service reset isn’t turned on by default. Fortunately, with a couple of configuration changes and a brief enrollment by each user at their next login, everyone will be set to perform a reset if they need it.
Ready to take the next steps in enabling these for your organization? Contact us here
and let’s talk!