Skip to content
IT Connect | UW Information Technology
Get Help
  • Tools, Services & Support
    • Academic Planning
    • Access & Authentication
    • Administrative Systems
    • Data & Reporting
    • Email, Calendars, & Events
    • IT Systems Infrastructure
    • Networks & Connectivity
    • Software & Computers
    • Storage & Hosting
    • Teaching & Learning
    • Voice & Video
  • Guides by Topic
    • Accessibility & Usability
    • Computers & Printing
    • Email & Calendaring
    • Emergency Preparedness
    • Identity, Diversity & Inclusion
    • IT Sourcing & Standards
    • Online Storage & Publishing
    • Research
    • Security & Authentication
    • Technology Facilities
    • Working Remotely
  • Getting Started
    • Students
    • Faculty / Instructors
    • Staff
    • Researchers
    • Retirees
    • Visitors
  • IT at the UW
    • About UW-IT
    • IT across the UW
    • IT Governance & Policies
    • News & Announcements
    • Services, Fees & Rates
  • Get Help
Get Help
  • Tools, Services & Support
    • Academic Planning
    • Access & Authentication
    • Administrative Systems
    • Data & Reporting
    • Email, Calendars, & Events
    • IT Systems Infrastructure
    • Networks & Connectivity
    • Software & Computers
    • Storage & Hosting
    • Teaching & Learning
    • Voice & Video
  • Guides by Topic
    • Accessibility & Usability
    • Computers & Printing
    • Email & Calendaring
    • Emergency Preparedness
    • Identity, Diversity & Inclusion
    • IT Sourcing & Standards
    • Online Storage & Publishing
    • Research
    • Security & Authentication
    • Technology Facilities
    • Working Remotely
  • Getting Started
    • Students
    • Faculty / Instructors
    • Staff
    • Researchers
    • Retirees
    • Visitors
  • IT at the UW
    • About UW-IT
    • IT across the UW
    • IT Governance & Policies
    • News & Announcements
    • Services, Fees & Rates
  • Get Help
  • IT Connect
  • Tools, Services & Support
  • IT Systems Infrastructure
  • Microsoft Infrastructure
  • Microsoft Infrastructure Service Design
  • Azure AD Capability Map
  • Audiovisual Systems Integration
  • Email Infrastructure
    • Sender Policy Framework (SPF)
    • Authenticated Email Submission using SMTP
  • Microsoft Infrastructure
    • Authentication Integration
      • Strong Authentication for Windows
        • Windows Hello for Business for the IT administrator
      • NETID Domain in Azure
      • Active Directory Federation Service
      • Firewalls with NETID domain
      • Getting Started: NETID Trusts
        • Common NETID Trust Use Scenarios
          • Sample GPO
        • NETID Trust Implications
        • Setting up a Domain Trust to the NETID domain
        • Setting up a Forest Trust to the NETID domain
        • Trust Types
      • Line of sight connectivity to NETID AD
    • Azure Active Directory
      • Azure AD Applications
        • Azure AD Application Integration Guide
          • Programmatic access to a SharePoint Online site
          • Programmatic access to an Exchange Online mailbox
          • Azure AD Application Creation
          • Azure AD Applications: Basic Configuration
            • Azure AD Applications: Advanced Configuration
        • Azure AD Applications: Azure Portal Navigation
          • Application Registration
          • Enterprise Applications
          • Azure AD Application Credentials and Management
        • Azure AD Application Key Concepts & Background
          • Azure AD Application Object schema
        • Azure AD OAuth Admin Consent and Risky Permissions
      • Azure AD Authentication
        • Azure AD Authentication Troubleshooting Guide
          • Azure AD authentication troubleshooting: Steps to take to help yourself
          • Azure AD authentication troubleshooting: Known problems and solutions
          • Azure AD authentication troubleshooting: How the technology works
        • Azure AD 2FA authentication
          • Opt-in to 2FA for UW Azure AD for Admin UW NetIDs
          • Per-application 2FA with Azure AD
        • Azure AD Cloud-only Authentication Expected Experience
        • Azure AD Cloud-only Authentication with Duo 2FA Expected Experience
        • Legacy authentication
      • Azure AD Device Join
        • Azure AD Device Registration
        • Cloud-based Device Management Glossary
        • Enterprise State Roaming
        • Intune at the UW
          • Intune enrollment restrictions
          • Autopilot at the UW
            • After Autopilot
            • Autopilot setup process
            • Use Windows Autopilot to reset, repurpose and recover devices
            • How to enroll a device in Autopilot
            • Troubleshooting Autopilot Errors
      • Azure AD Roles
        • Security Reader
      • Azure Information Protection
      • When Should a New Azure AD Tenant Be Created?
    • Communications
      • Azure AD Governance
      • MI Index
      • MI Newsletters
      • MI Notifications
        • 20150730: Azure AD Device Join Guidance
      • Proposals and Analysis
        • 20211215–UW Web IdP support
        • 20220926: Duo and 2FA for Windows
        • ‘NETID DCs ready for cloud’ analysis
          • Appendices – Cloud-ready DCs
        • 20190904: Azure AD Password Hash Sync analysis
        • University Hospital System AD and Azure AD survey summary
        • 20170421: Local Admin Password Management (LAPS)
        • 20170215: Azure AD application identities
        • 20140716: NETID DCs no longer permit NTLMv1
        • 20130801: MI DNS suffix management
        • 20130524: Adding GID Support to the Groups Service and MI
        • 20121222: MI mail address and Office 365
        • 20110629: Mac authentication using UW NetIDs
        • 20100815: MI computer naming
        • 20100815: Group Policy Management
        • 20100815: Delegated OU Management
        • 20090915: MI contact management
        • MI inactive account proposal
        • MI token bloat
        • 20190408: Bring your own DNS zone for DDNS
        • 20210519: Personal group creation using MI GIDs
    • Getting Started: Delegated OUs
      • AD Groups
      • Active Directory Certificate Services (AD-CS)
      • Adding a computer to a Delegated OU
        • Adding a Mac to a Delegated OU
        • Adding Unix or Mac to a Delegated OU
        • Using New-UWWIComputer.ps1
      • Delegated OU Guidance
        • Autopilot and Delegated OUs
        • Bitlocker
        • Common Delegated OU Use Scenarios
        • Delegated OU Admin Tools and Tips
        • Delegated OU role groups
        • Delegated Service Principal Name values
        • Group Managed Service Accounts
        • Hybrid Azure AD Join with Delegated OU
        • Managing Windows Firewall with GPOs
        • NETID Domain Item Restore
        • OU dnsHostname Report
        • Solution: Domain Computers for Delegated OUs
      • Domain Migration Blueprint
        • Verifying UW NetIDs
      • Domain-based DFS Namespace Services
      • LAPS – Local Administrator Password Solution
      • Using Dynamic DNS for Workstations
    • Getting Started: Windows Domains
    • Microsoft Infrastructure Service Design
      • Azure AD Capability Lifecycle and Support
      • Azure AD Capability Map
      • Delegated OU Permissions
      • MI Architecture Guide
        • Azure AD Architecture
        • Azure AD Sync
        • Group Member Privacy
        • Group Service Data Mapping
        • Identity Data Mapping
        • Kiwi: NETID user provisioning
        • Microsoft Identity Manager
        • NETID Active Directory
        • NETID Group Sync Agent
      • MI Capability Map
      • MI Namespace
      • MI Policy
        • Contact Practices
        • Delegated OU Practices
        • Group Policy
          • Default Domain Policy
          • Sample DNS Suffix GPO
          • Unclaimed Computers Policy
      • NETID Domain Schema
        • 2014 Custom Schema
        • Bitlocker Schema
        • Catalyst Labs Mac Support
        • Dell RAC Support
        • EduPerson Support
        • Exchange Server 2003 Schema
        • OCS 2007 Schema
        • SCCM Schema
        • Schema OIDs
        • UW GDS/EDS Support Schema
        • uwReadAccess for uwCourseOffering
        • uwViewAccess Schema
        • Windows Server 2003 R2 Schema
        • Windows Server 2008 R2 Schema
        • Windows Server 2008 Schema
        • Windows Server 2012 R2 Schema
        • Windows Server 2012 Schema
      • NETID Groups
      • NETID Users
        • All NETID User Attributes
        • Managed NETID User Attributes
        • NETID User Inactivity
          • Ensure an account is considered active
          • Re-enable a NETID AD account
        • NETID User Limitations
        • NETID User Support
        • NETID User Workarounds
        • Self-Writable NETID User Attributes
    • Other IT Services and Help
      • Bitlocker Recovery
      • What is the Higher Education IT Environment?
      • AD Security Overview
      • Azure Virtual Desktop
      • Frequently Asked Questions
        • AD Terminology
        • Azure AD Terminology
        • Cross Forest
        • End User Help
        • OU Guidance
        • Services and the NETID Domain
        • System Center
        • Windows Security
      • Microsoft Store for Business
      • Understanding SDDL Syntax
      • Unix Interop with NETID AD – Community contributions
      • Windows Domain Setup at the UW
        • DC Troubleshooting
        • Group Policy Object Processing Order
        • Moving Domain Controllers to p172
        • OU Design Guidelines
        • Windows Domains and DNS
        • Windows Domains and Firewalls
    • Software
      • Activating Microsoft Products
        • Re-activating Microsoft Products
  • Unix (Linux) Managed Servers
  • UW-IT Design Guide
    • Cable, Pathway, Wi-Fi Materials & Services Contract
  • UWFT Technical (FTT)
  • Windows Managed Servers
    • 618 Shared Infrastructure
    • Incident Response
    • OS lifecycle support
    • SQL Server lifecycle support

Azure AD Capability Map

Last updated: March 6, 2023
Audience: IT Staff / TechnicalDecision Makers

The Azure AD capability map has been discontinued. Please reference the Microsoft Infrastructure capability map instead.

Archive:

PDF of AAD Capability Map (March 2021)

PDF of AAD Capability Map (May 2018)

 

Is there a problem on this page? Let us know.
  • Audiovisual Systems Integration
  • Email Infrastructure
    • Sender Policy Framework (SPF)
    • Authenticated Email Submission using SMTP
  • Microsoft Infrastructure
    • Authentication Integration
      • Strong Authentication for Windows
        • Windows Hello for Business for the IT administrator
      • NETID Domain in Azure
      • Active Directory Federation Service
      • Firewalls with NETID domain
      • Getting Started: NETID Trusts
        • Common NETID Trust Use Scenarios
          • Sample GPO
        • NETID Trust Implications
        • Setting up a Domain Trust to the NETID domain
        • Setting up a Forest Trust to the NETID domain
        • Trust Types
      • Line of sight connectivity to NETID AD
    • Azure Active Directory
      • Azure AD Applications
        • Azure AD Application Integration Guide
          • Programmatic access to a SharePoint Online site
          • Programmatic access to an Exchange Online mailbox
          • Azure AD Application Creation
          • Azure AD Applications: Basic Configuration
            • Azure AD Applications: Advanced Configuration
        • Azure AD Applications: Azure Portal Navigation
          • Application Registration
          • Enterprise Applications
          • Azure AD Application Credentials and Management
        • Azure AD Application Key Concepts & Background
          • Azure AD Application Object schema
        • Azure AD OAuth Admin Consent and Risky Permissions
      • Azure AD Authentication
        • Azure AD Authentication Troubleshooting Guide
          • Azure AD authentication troubleshooting: Steps to take to help yourself
          • Azure AD authentication troubleshooting: Known problems and solutions
          • Azure AD authentication troubleshooting: How the technology works
        • Azure AD 2FA authentication
          • Opt-in to 2FA for UW Azure AD for Admin UW NetIDs
          • Per-application 2FA with Azure AD
        • Azure AD Cloud-only Authentication Expected Experience
        • Azure AD Cloud-only Authentication with Duo 2FA Expected Experience
        • Legacy authentication
      • Azure AD Device Join
        • Azure AD Device Registration
        • Cloud-based Device Management Glossary
        • Enterprise State Roaming
        • Intune at the UW
          • Intune enrollment restrictions
          • Autopilot at the UW
            • After Autopilot
            • Autopilot setup process
            • Use Windows Autopilot to reset, repurpose and recover devices
            • How to enroll a device in Autopilot
            • Troubleshooting Autopilot Errors
      • Azure AD Roles
        • Security Reader
      • Azure Information Protection
      • When Should a New Azure AD Tenant Be Created?
    • Communications
      • Azure AD Governance
      • MI Index
      • MI Newsletters
      • MI Notifications
        • 20150730: Azure AD Device Join Guidance
      • Proposals and Analysis
        • 20211215–UW Web IdP support
        • 20220926: Duo and 2FA for Windows
        • ‘NETID DCs ready for cloud’ analysis
          • Appendices – Cloud-ready DCs
        • 20190904: Azure AD Password Hash Sync analysis
        • University Hospital System AD and Azure AD survey summary
        • 20170421: Local Admin Password Management (LAPS)
        • 20170215: Azure AD application identities
        • 20140716: NETID DCs no longer permit NTLMv1
        • 20130801: MI DNS suffix management
        • 20130524: Adding GID Support to the Groups Service and MI
        • 20121222: MI mail address and Office 365
        • 20110629: Mac authentication using UW NetIDs
        • 20100815: MI computer naming
        • 20100815: Group Policy Management
        • 20100815: Delegated OU Management
        • 20090915: MI contact management
        • MI inactive account proposal
        • MI token bloat
        • 20190408: Bring your own DNS zone for DDNS
        • 20210519: Personal group creation using MI GIDs
    • Getting Started: Delegated OUs
      • AD Groups
      • Active Directory Certificate Services (AD-CS)
      • Adding a computer to a Delegated OU
        • Adding a Mac to a Delegated OU
        • Adding Unix or Mac to a Delegated OU
        • Using New-UWWIComputer.ps1
      • Delegated OU Guidance
        • Autopilot and Delegated OUs
        • Bitlocker
        • Common Delegated OU Use Scenarios
        • Delegated OU Admin Tools and Tips
        • Delegated OU role groups
        • Delegated Service Principal Name values
        • Group Managed Service Accounts
        • Hybrid Azure AD Join with Delegated OU
        • Managing Windows Firewall with GPOs
        • NETID Domain Item Restore
        • OU dnsHostname Report
        • Solution: Domain Computers for Delegated OUs
      • Domain Migration Blueprint
        • Verifying UW NetIDs
      • Domain-based DFS Namespace Services
      • LAPS – Local Administrator Password Solution
      • Using Dynamic DNS for Workstations
    • Getting Started: Windows Domains
    • Microsoft Infrastructure Service Design
      • Azure AD Capability Lifecycle and Support
      • Azure AD Capability Map
      • Delegated OU Permissions
      • MI Architecture Guide
        • Azure AD Architecture
        • Azure AD Sync
        • Group Member Privacy
        • Group Service Data Mapping
        • Identity Data Mapping
        • Kiwi: NETID user provisioning
        • Microsoft Identity Manager
        • NETID Active Directory
        • NETID Group Sync Agent
      • MI Capability Map
      • MI Namespace
      • MI Policy
        • Contact Practices
        • Delegated OU Practices
        • Group Policy
          • Default Domain Policy
          • Sample DNS Suffix GPO
          • Unclaimed Computers Policy
      • NETID Domain Schema
        • 2014 Custom Schema
        • Bitlocker Schema
        • Catalyst Labs Mac Support
        • Dell RAC Support
        • EduPerson Support
        • Exchange Server 2003 Schema
        • OCS 2007 Schema
        • SCCM Schema
        • Schema OIDs
        • UW GDS/EDS Support Schema
        • uwReadAccess for uwCourseOffering
        • uwViewAccess Schema
        • Windows Server 2003 R2 Schema
        • Windows Server 2008 R2 Schema
        • Windows Server 2008 Schema
        • Windows Server 2012 R2 Schema
        • Windows Server 2012 Schema
      • NETID Groups
      • NETID Users
        • All NETID User Attributes
        • Managed NETID User Attributes
        • NETID User Inactivity
          • Ensure an account is considered active
          • Re-enable a NETID AD account
        • NETID User Limitations
        • NETID User Support
        • NETID User Workarounds
        • Self-Writable NETID User Attributes
    • Other IT Services and Help
      • Bitlocker Recovery
      • What is the Higher Education IT Environment?
      • AD Security Overview
      • Azure Virtual Desktop
      • Frequently Asked Questions
        • AD Terminology
        • Azure AD Terminology
        • Cross Forest
        • End User Help
        • OU Guidance
        • Services and the NETID Domain
        • System Center
        • Windows Security
      • Microsoft Store for Business
      • Understanding SDDL Syntax
      • Unix Interop with NETID AD – Community contributions
      • Windows Domain Setup at the UW
        • DC Troubleshooting
        • Group Policy Object Processing Order
        • Moving Domain Controllers to p172
        • OU Design Guidelines
        • Windows Domains and DNS
        • Windows Domains and Firewalls
    • Software
      • Activating Microsoft Products
        • Re-activating Microsoft Products
  • Unix (Linux) Managed Servers
  • UW-IT Design Guide
    • Cable, Pathway, Wi-Fi Materials & Services Contract
  • UWFT Technical (FTT)
  • Windows Managed Servers
    • 618 Shared Infrastructure
    • Incident Response
    • OS lifecycle support
    • SQL Server lifecycle support
UW Information Technology logo

Connect with UW-IT:

  • Twitter
  • YouTube
  • Get Help
  • My Requests
  • Service Status
  • About IT Connect
  • Sitemap
  • UW-IT Jobs
  • UW-IT Internal
  • Accessibility
  • Campus Safety
  • ISC
  • My UW
  • Privacy
  • Security
  • Terms

© 2023 University of Washington | Seattle, WA