The name Azure AD Password Protection indicates that users are protected from using bad passwords, but that’s not the case. If an organization is serious about securing its Active Directory environment, whether on-prem or in the cloud, Azure AD built-in “protections” are not enough.
Azure AD Password Protection includes two lists to check user passwords against. Yet, both are lacking for different reasons.
You don’t need to abandon Azure AD or O365 to implement stronger password policies or to block users from using leaked passwords; there are solutions available to enforce these policies in your on-prem environment and utilize a federation solution or Azure AD password write-back to enforce those policies for your users across environments.
In this whitepaper, you’ll learn about:
- How Azure AD Password Protection works
- The Global Banned and Custom Banned Password List
- User Experience
- Solution recommendation