What Microsoft Entra ID Is (Formerly Azure AD)
Same product, new name. It's the identity layer underneath everything you sign into in Microsoft's cloud.
By Shehryar Hassan, Microsoft 365 & Azure Consultant
If you've worked in Microsoft 365 or Azure for more than a year, you've probably noticed Azure Active Directory quietly became Microsoft Entra ID. Same product, new name, and it's worth understanding what it actually does regardless of what it's called.
It's the thing that knows who you are
Entra ID is Microsoft's identity system. Every time you sign into Microsoft 365, Azure, Teams, or basically any Microsoft cloud service with your work account, Entra ID is what's checking who you are and what you're allowed to access. It's not a place you store files or run applications. It's the layer underneath everything else that handles identity, sign in, and permissions.
Think of it as the front door and the guest list combined. It decides whether you get in, and once you're in, it knows what rooms you're allowed to walk into based on your role.
Why the rename happened
Microsoft renamed it partly because "Azure Active Directory" made it sound like an Azure only product, when in reality it's the identity backbone for all of Microsoft's cloud services, not just Azure specifically. The old on premises Active Directory, the one that's run on Windows Server for decades, is a genuinely different product, and the naming similarity confused a lot of people for years. Entra ID is the cleaner, cloud native name for the cloud identity service specifically.
What it actually does day to day
Beyond just logging you in, Entra ID handles multi factor authentication, so a password alone isn't enough to get into your account. It manages Conditional Access policies, which are rules like "block sign in from outside these countries" or "require a compliant device to access company email." It also manages groups, which control who has access to what across Teams, SharePoint, and other services, and it handles single sign on, so you don't need a different password for every Microsoft tool you touch.
Why it matters even if you never touch the admin side
Most people will never open the Entra ID admin center, and that's fine. But understanding that it exists explains a lot of things that otherwise seem mysterious, like why you suddenly get asked to approve a sign in on your phone, why access to a certain SharePoint site depends on which group you're in, or why signing into one Microsoft app logs you into the others automatically. It's all the same identity system working quietly in the background, and knowing that makes the occasional prompt or block a lot less confusing when it happens.
Get new posts by email
One note when there is something worth reading. No spam, unsubscribe anytime.
Related articles
Azure API Management, What It Does and When You'd Actually Use It
Azure API Management puts a gateway in front of your APIs for throttling, auth, and versioning, but it's not worth the overhead for every API you run.
What Azure Availability Zones Are and When You Need Them
Availability zones protect you from a single datacenter failing, not from a whole region going down. Here's what they actually do and when the extra setup is worth it.
Azure Traffic Manager, What It Does and How It's Different From Load Balancer
Traffic Manager and Load Balancer sound like they do the same thing. They don't. One works at the DNS level across regions, the other spreads traffic inside one region. Here's what each is actually for.