Microsoft Entra ID Explained — Cloud Identity, SSO & Conditional Access

Microsoft Entra ID Explained (formerly Azure AD)

1 min readPublished 22 Jul 2026

Track your progress. Sign in to mark this guide complete and build your Job Readiness Score.

Microsoft Entra ID (formerly Azure Active Directory) is the cloud identity service behind Microsoft 365 and Azure — and it is not a cloud-hosted domain controller.

Interactive explainer

Microsoft Entra ID

Cloud identity (formerly Azure AD) behind Microsoft 365 and Azure.

Tap or hover a part to learn more.

1. Cloud identity provider

Formerly Azure AD.

Microsoft Entra ID (previously Azure Active Directory) is Microsoft's cloud identity and access service behind Microsoft 365 and Azure. It is NOT a cloud-hosted domain controller — it's a modern, internet-facing identity platform using OAuth 2.0/OpenID Connect/SAML rather than Kerberos/LDAP.

Check your understanding

1. Microsoft Entra ID is best described as…

2. What evaluates signals like device, location and risk to allow or block sign-in?

Keep learning

Microsoft Entra ID Active Directory CompTIA Security+

Practise this in AI Interview™

Not the same as on-prem AD

On-premises AD DS uses Kerberos/LDAP; Entra ID is an internet-facing identity provider using OAuth 2.0 / OpenID Connect / SAML. Confusing the two is one of the most common interview mistakes.

SSO, MFA and Conditional Access

Users sign in once and get token-based single sign-on to thousands of apps. Conditional Access evaluates signals — user, device compliance, location, risk — and decides whether to allow, block or require MFA. It's the practical enforcement point for Zero Trust.

Hybrid identity

Entra Connect synchronises on-prem AD accounts to the cloud so users have one identity everywhere. Understanding the AD ↔ Entra relationship is core to modern Windows and Azure administration.

This connects Active Directory to the cloud and underpins Microsoft SC-900/AZ-900 and Security+ cloud-identity topics.

Interview Intelligence

How this topic actually shows up in interviews — and how to demonstrate you understand it.

Why employers ask about this

Almost every organisation now uses Microsoft 365, so cloud identity is essential. Employers check you understand modern, token-based access.

Technical questions

How does Entra ID differ from on-prem AD?+

Different protocols (OAuth/OIDC/SAML vs Kerberos/LDAP) and a cloud, internet-facing model rather than domain-joined machines.

How does Conditional Access support Zero Trust?+

It continuously evaluates signals and enforces least-privilege access decisions (allow/block/MFA) per sign-in.

Behavioural questions

Tell me about improving account security for a team.+

STAR: the risk, enabling MFA/Conditional Access, and the reduction in account compromise.

Real-world scenarios

“Leadership wants to block sign-ins from outside the UK.”+

Expected answer: Use a Conditional Access location policy, piloted carefully with break-glass accounts excluded.

Common misconceptions

What candidates get wrong in interviews and on the job — and what strong professionals actually do.

Myth

'Entra ID replaces on-prem AD.'

Reality

many orgs run hybrid identity with both, synced by Entra Connect.

Myth

'Passwords are enough.'

Reality

MFA plus Conditional Access is the modern baseline.

Practise in AI Interview™Rehearse these questions, scored.Plan with Career Coach™A personalised path to your goal.Evidence it in Career Passport™Prove this skill to employers.

Employability Intelligence

Where this knowledge takes you — the jobs, skills and certifications it feeds into.

Relevant roles

Help DeskSystems AdministratorCloud/Identity EngineerSecurity Engineer

Skills you're proving

Entra IDSSOConditional AccessMFA

Recommended certifications

CompTIA A+CompTIA Security+

Career progression

Help Desk → Sysadmin → Cloud/Identity/Security Engineer.

What employers expect

That you understand modern cloud identity and can secure access with Conditional Access and MFA.

Frequently asked questions

Is Entra ID just Active Directory in the cloud?

No. It's a cloud identity provider using OAuth/OIDC/SAML, not Kerberos/LDAP like on-prem AD DS.

What is Conditional Access?

A policy engine that allows, blocks or challenges sign-ins based on signals like device, location and risk.

What is hybrid identity?

Syncing on-prem AD accounts to Entra ID (via Entra Connect) so users have one identity across on-prem and cloud.

Practise what you've learned

Turn this guide into real, evidenced progress

Missiora helps you measure, improve and evidence the capabilities employers actually value — start with the tools best suited to this topic.

Published by

Missiora

Missiora is an AI Employability Intelligence platform. Our resources are researched and reviewed by the Missiora team to help you measure, improve and prove your career readiness.