Authentication in Azure Stack

Authentication is one of the most important topics if you plan to implement Azure Stack. As it comes without any direct connection to your data center's infrastructure, you'll need to decide how to connect it to your preferred authentication mechanism.

For Azure Stack, the basic authentication service is MS-Graph. This service is being used with Azure and Office 365, too. Basically, it is a REST service to an internal directory service and it builds the basis of authenticating all virtual machines and services within the Azure Stack itself.

Regarding user authentication for customers, there are two choices:

• Azure Active Directory (Azure AD)
• Active Directory Federation Services (ADFS)