In this video, Sharon provides an overview of the Azure Access Panel and how the panel provides an one-stop webpage for all of your cloud and SaaS apps.
- [Instructor] In my opinion, one of the coolest things that you can do with Azure Active Directory is use the Access Panel for your users. The Access Panel is a website that allows your users to view and launch cloud apps, configure self-service password reset, self-manage their groups, see their account details, or modify their multi-factor authentication, MFA, settings. From the IT Admin point of view, we're able to provide that easy portal for our users.
We setup the cloud-based applications for them. We can provide links to other URLs as necessary so you can avoid those phone calls. "How do I get to this site?" And because we're in IT, we have control issues, so using the Access Panel, we're able to control access to those applications via users and groups. We can control it by device, or even location. So let's take a look at how this actually works. I'm going to do this via groups. I just find using groups is easier than managing all my users individually.
I like to group everybody, and I like to use dynamic groups, and I'll show you that in an upcoming demo. I have three groups setup here. I have our Human Resources group, our Company group, and our Social Media group. We have an HR, or human resource, employee. That employee belongs to both the Human Resources group, and the Company group. When they login to the Access Panel, which can be found at myapps.microsoft.com, they will have access to the SAS apps, or clouds apps, that we have already configured.
Next, we have our Social Media Marketing team member, and they belong to the Company group, as well as the Social Media Group, so their needs are going to be a little bit different, and when they login to myapps.microsoft.com to access that Access Panel, the SAS apps that they need to access are going to be slightly different for them. This is all well and good, but let's actually see it. I've navigated to myapps.microsoft.com, and I'm going to go ahead and login with the firstname.lastname@example.org account.
First thing I want to point out is remember the company branding that we setup in the last chapter? This is where you'll see it. Typically in the sign-in page here you'll probably want to put a picture, or your company logo. I'm going to go ahead and enter my password. You can see, I already have some SAS applications available to me. I've set these up in preparation for this demo. I'm going to start off in Groups. This will show you all the groups that I own.
It will also show you the groups that I'm a part of, so you can see I belong to the Admin Group, the All Users and the Line of Business Users. I can also come in and modify my profile. You'll see here that I have my email address. I have an alternate email, and a phone number that I've used for verification. If I had a device attached to this account, it would be registered here. From here I can go ahead and change my password if I wish. I can also setup self-service password reset. I'm going to click on this.
Azure Active Directory has to verify who I am, and to do so, I need to provide two sources of verification. Now I have set this up previously within Azure. I'll show you how to do that in an upcoming demo. If I needed to change anything, I could, but in my case everything looks good, so I will just click, looks good. Finally, the part that I love the most about this is that our users can now just click on these links and they will be directed to that website. In the case of Twitter, in the backend, I have already configured username and password.
Therefore, the user never knows what that username and password is. If for some reason they no longer need access to that Twitter account, I can easily shut them off, and they can't access it. There is a caveat to that which I'll get into in an upcoming demo. I'm going to go ahead, click on Twitter, and you'll notice, this is going to launch me directly into Twitter. I did not have to enter a username or password. As you can see here, this is the caveat I want to point out. The browser can be setup to save the password.
Keep that in mind when you're setting this up in the future. I'm going to go ahead and click Never. I'm going to flip back to the Access Panel. You'll notice I also have an icon here for our Line of Business application. This could be an internal Line of Business application that our users need to use. You'll notice I also have Box and Netflix. I'm going to go ahead and launch Netflix, but this one is going to be a little different. In this case, the user is prompted to enter in their credentials.
As a business owner, I may not want to have all my users accessing Netflix, but I want to provide an easy way for them to get to Netflix, but they have to add in their own credentials. As you can see, using the Access Panel will keep everything very simple and easy for your users, and it is super easy to setup as you're going to see in our next video.
- Azure AD
- Adding company branding
- Adding a custom domain
- AD Connect configuration
- AD Connect Health
- Administering users and groups
- Configuring SaaS applications
- Granting conditional access
- Revoking access
- Application proxy and discovery
- Integrating web and desktop applications
- Creating an Azure AD B2C directory
- Registering an application
- Creating a Microsoft identity