1. Identities and Azure AD Premium
Presented By :
Micah Linehan
Cloud Sherpa

2. Topics Covered Azure AD Connect Sourcing Identities
Write Back to Active Directory
Azure RMS
Multi-Factor Authentication
Third Party SAAS Applications

3. Windows Azure Active Directory
Azure AD Connect
IT Academy, Other service
Windows Azure Active Directory
CRM & Project Online
STS
on premises
Trust
Active Directory Federation Server 3.0
Admin Portal/
PowerShell
IdP
Office 365
Directory
Store
IdP AD
AAD
Connect
Provisioning
platform
Windows Intune
Directory Graph REST API
3rd Party
Apps

4. Azure AD Connect Cloud Identity Pairing Immutable ID UserPrincipalName
Soft Pair vs Hard Pair
Immutable ID
Base 64 Hex Conversion of ObjectGuid
UserPrincipalName
Basis for soft cloud pairing
Exchange
Hybrid Deployment

5. Identities Users, groups, objects, identities mastered in the cloud
Cloud Identity
Cloud Identity With On-Premises AD 
Federated Identity with On-Premises AD
Cloud Identity
Cloud Identity
Federated Identity
AAD Connect
AAD Connect
User
User
User
Federation
On-Premises Identity
On-Premises Identity
On-Premises Identity
Users, groups, objects, identities mastered in the cloud
Users, groups, objects mastered On-Premises and identities mastered in the cloud, *optional password hash sync to the cloud
Users, groups, objects, identities mastered On-Premises

6. Sourcing Identities Identities and Groups are the way we manage access
Incorrectly configured or misappropriated accounts are a huge vulnerability
Control what accounts go into the cloud
Filtering Object From Active Directory
OU based Filtering
Object based filtering based on attributes

7. Write Back to AD
Active Directory on Server supports Azure AD Join write back
Password Write Back
Self Service Password Reset
Group Membership Write Back
Delegated administration of group members in the cloud

8. Azure RMS Instant revocation of access
Securely share documents and files
No certificate management required
Hybrid management integrate with your on premise RMS server

9. Multi-Factor Authentication
Azure Administrators do not require AD Premium for this feature
Real Time Alerts and Monitoring for Access
Azure Access
Third Party Application Access
Location Access
Use in cloud or Hybrid with on premise servers
White List your on premise IPs
Azure Administrators do not require AD Premium for this feature
Real Time Alerts and Monitoring for Access
Azure Access
Third Party Application Access
Location Access
Use in cloud or Hybrid with on premise servers
White List your on premise IPs

10. Third Party SAAS Applications
Publish Access to Third Party Apps
Manage Shared Access and Security by automating password changes through Azure 3rd Party SSO
Twitter
Facebook
WordPress
Office 365 can be the Central Application Hub

11. Q & A