Question

Your organization is migrating a web application to Azure App Service. The security team asks who is responsible for managing user password policies and authentication mechanisms for the application's end users. According to the shared responsibility model, who has this responsibility?

Accepted Answer

The customer is responsible for application-level user authentication and password policies

Answer

Microsoft is responsible for all authentication and password management in Azure

Answer

Microsoft is responsible because Azure App Service is a PaaS offering

Answer

Responsibility is shared equally between Microsoft and the customer for all authentication