Authentication refers to the act of challenging a user for credentials when trying to access a resource. What this does is form the foundation for creating security principles that are used for identity and access control. More simply put, authentication is the process of proving that you are whom you say you are. To protect against stolen passwords and compromised credentials, best practices dictate that organizations require a second authentication factor in addition to a password when planning or managing authentication in Azure. That said, Azure AD provides features such as multi-factor authentication and self-service password reset or SSPR to help administrators protect against compromised credentials. Scenarios that benefit from MFA and SSPR typically include use cases, such as those where users need to sign-in to applications or where users need help with password resets. By leveraging authentication features like MFA and SSPR users will be asked to provide additional verification that they are who they say they are when trying to access resources. Such verification information that users might be asked to provide include things like a passcode that's provided in an email or a text message, a phone call, a notification or a code on their phone, or maybe answers to security questions that were set up previously. Azure MFA and SSPR provide administrators with improved controls that allow them to protect their organizations. SSPR or self-service password reset allows users to reset their passwords without any administrator intervention whenever they need to. Features offered by SSPR include password changes, password resets, and account unlocks. Password change allows a user who knows his password to change it to something new. Password reset, however, allows a user who has forgotten his password to reset that password using one or more approved authentication methods. Account unlock allows a locked out user to unlock his or her account using one or more approved authentication methods. Azure MFA is Microsoft's two step verification solution that allows an administrator to configure pre-approved authentication methods that users must use to authenticate before accessing resources. Azure MFA or multi-factor authentication helps safeguard access to data and applications, while maintaining a simplified sign-in process for end users.

LECTURES: Course Introduction - What is Authentication - Designing an Authentication Method - Configuring Multi-Factor Authentication - Accessing MFA Service Settings - Enable SSPR - Sign-in Activity Reports in the Azure Active Directory Portal - Using Sign-in Activity Reports in the Azure Active Directory Portal - Azure Active Directory Monitoring - Implement MFA - Manage User Settings with Azure Multi-Factor Authentication in the Cloud - Manage MFA for Users - Reports in Azure Multi-Factor Authentication - Configure Application Registration in Azure AD - How to Configure Application Registration in Azure AD - What is Azure AD Application Proxy - Configure Azure AD Application Proxy - Azure Active Directory B2B - Add Guest Users to Your Directory in the Azure Portal - Conclusion