Vendata Corp plans to leverage Azure AD for their identity and access management needs. Their solution requirements are as follows:
- Collaborate with external partners without managing individual usernames and passwords.
- Allow application users to access their e-commerce website using Apple, Google, and Microsoft email accounts.
- Restrict access to corporate applications to the specific IP range 52.11.11.0/27.
- Enforce multi-factor authentication for users accessing corporate applications from external networks.
- Mitigate risks associated with leaked passwords and compromised accounts.
- Provide administrators with a weekly report of role assignments to verify and review access rights.
- Manage several HTTPS applications requiring secure storage of SSL certificates.
- Securely store credentials for multiple application users who rely on an SQL backend, thus eliminating the need to hardcode encrypted credentials.
