

Internet Explorer’s zones are defined with specific default settings to lower the security features for websites added to these zones. Possible negative impact (What could go wrong?) The Trusted Sites zone, by default, offers a medium level of security. Restricted Sites is the most restricted zone and Internet Explorer deploys the maximum safeguards and fewer secure features (like Windows Integrated Authentication) are enabled.

Per zone, Internet Explorer is allowed specific functionality. By default, Azure AD is the identity platform for Microsoft Cloud services, like Exchange Online, SharePoint Online and Azure.īy adding the URLs for these services to the Trusted Sites list, we enable a seamless user experience without browser prompts or hick-ups to these services. Hybrid Identity enables functionality for people using on-premises user accounts, leveraging Azure Active Directory as an additional identity platform. In the previous part we looked at the Local Intranet zone.Īdding URLs to the Trusted Sites zone for Internet Explorer, also applies to Microsoft Edge.

In this part we look at the Trusted Sites zone. This is the second part for adding Microsoft Cloud URLs to Internet Explorer’s zone. In this part of the series, we’ll look at the required Hybrid Identity URLs that you want to add to the Trusted Sites list in Internet Explorer. In this series, labeled Hardening Hybrid Identity, we’re looking at hardening these implementations, using recommended practices. Most Microsoft-based Hybrid Identity implementations use Active Directory Federation Services (AD FS) Servers, Web Application Proxies and Azure AD Connect installations.
