Microsoft Entra Domain Services
Managed Active Directory domain in Azure offering domain join, LDAP, Kerberos/NTLM and Group Policy, synchronised one way from Microsoft Entra ID.
- Provider
- azure
- Category
- Security
- Official docs
- https://learn.microsoft.com/en-us/entra/identity/domain-services/administration-concepts
- Also known as
- Azure AD DS
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| authorizationModel | enum | none | rbac | abac | rebac | no | rbac | ▸ rbac |
| centralised | boolean | — | no | true | ▸ true |
| forestTrust | boolean | — | no | false | inherited |
| managed | boolean | — | no | true | ▸ true |
| mfa | boolean | — | no | false | ▸ false |
| protocol | enum | oidc | saml | oauth2 | iam | custom | no | oidc | ▸ custom |
| replicaSets | integer | — | no | 1 | inherited |
| secureLdap | boolean | — | no | false | inherited |
| secureLdapInternetAccess | boolean | — | no | false | inherited |
| sku | enum | standard | enterprise | premium | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "entra-domain-services", component: "azure-entra-domain-services" }Resource Access Managementalibaba-ramAmazon Cognitoaws-cognitoAmazon Cognito identity poolaws-cognito-identity-poolAWS Directory Serviceaws-directory-serviceAWS IAMaws-iamAWS IAM Identity Centeraws-iam-identity-centerAWS IAM Roles Anywhereaws-iam-roles-anywhereAWS Directory Service Simple ADaws-simple-adMicrosoft Azure Attestationazure-attestationMicrosoft Entra External IDazure-entra-external-idMicrosoft Entra IDazure-entra-idMicrosoft Entra Verified IDazure-entra-verified-idAzure IoT Hub Device Provisioning Serviceazure-iot-dpsManaged identities for Azure resourcesazure-managed-identityCloudflare One identity providercloudflare-one-identity-providerActive Directory Domain Servicesactive-directoryAthenzathenzAuth0auth0AutheliaautheliaauthentikauthentikClerkclerkDexdexFreeIPAfreeipaGeneric identity provideridentity-providerKeycloakkeycloakOAuth2 Proxyoauth2-proxyOktaoktaOpenFGAopenfgaOpenLDAPopenldapOryoryPing Identity Platformping-identitySpiceDBspicedbSPIREspireStytchstytchWorkOSworkosZitadelzitadelCloud Identitygoogle-cloud-identityFirebase Authenticationgoogle-firebase-authGoogle Identity Platformgoogle-identity-platformManaged Service for Microsoft Active Directorygoogle-managed-microsoft-ad
and 7 more → Identity provider page# yaml-language-server: $schema=../../schema/component.schema.json # Microsoft Entra Domain Services: managed AD DS domain (LDAP, Kerberos/NTLM, Group Policy, domain join), # one-way synchronised from Microsoft Entra ID. "Overview of Microsoft Entra Domain Services": one replica set # of two Microsoft-managed domain controllers, encryption at rest and backups run by the platform. # "Tutorial - Configure LDAPS": secure LDAP, and internet access to it, are disabled by default. schemaVersion: "1" type: "component" id: "azure-entra-domain-services" kind: "identity-provider" provider: "azure" docs: "https://learn.microsoft.com/en-us/entra/identity/domain-services/administration-concepts" aliases: ["Azure AD DS"] defaults: protocol: "custom" authorizationModel: "rbac" centralised: true managed: true mfa: false properties: sku: type: "enum" values: ["standard", "enterprise", "premium"] secureLdap: type: "boolean" default: false secureLdapInternetAccess: type: "boolean" default: false forestTrust: type: "boolean" default: false replicaSets: type: "integer" default: 1