Step-By-Step: Implementing Azure AD Password Protection On-Premises

Hi Daniele De Angelis,

Thanks for this great blog and the guided instructions.

I noticed at many points in this you mentioned the "Microsoft Global Banned Password List", but after reading more on https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad, I'm interested to learn if you know whether or not this List uses, contains, or is integrated with the (probably) much larger Have I Been Pwned Password list managed by Troy Hunt, that can be queried and tested https://haveibeenpwned.com/Passwords.

I'm comparing this Azure AD Password Protection tool against https://safepass.me and apparnetly we can run both at the same time, but the main difference is that safepass(dot)me uses the HIBP Pwned Passwords Database.

Thanks!