Microsoft Accounts Control Access to Some Critical Services

Azure Active Directory identities can now be used with most Microsoft services, although a handful of Microsoft services that are important to organizations, such as the Microsoft Developer Network (MSDN), still use Microsoft accounts to authenticate users. Microsoft accounts are assigned with only a valid e-mail address for verification, so an employee could have a personal Microsoft account beyond their employer’s control. To reduce the likelihood of losing organizational access to services still using Microsoft accounts, organizations may want to identify and properly manage Microsoft accounts used by their employees.

Microsoft Account Self-Assertion Creates a Risk

The Microsoft account service is a Microsoft-hosted directory service for managing information about consumers and their devices. A Microsoft account is used to authenticate access to a variety of Microsoft and third-party consumer Web sites and services, such as Outlook.com and Xbox Live. For businesses and developers, the most notable service that still requires the use of a Microsoft account is MSDN, which provides developer-focused information about, and downloads of, Microsoft software. However, Microsoft accounts can still be used by employees on many other Microsoft services, so organizations may want to take some steps to reduce risk.