1. Implementing and Managing Azure Multi-factor Authentication
11/19/2017 1:29 PM
Implementing and Managing Azure Multi-factor Authentication
Denis Mihić
Founder and IT Architect
DNS IT Consulting and Services
MCT, MCSE: Cloud and Management | MCSE: Server Infrastructure
MCITP | MCTS | MCSA | MCSE:Security
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. 11/19/2017 1:29 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. 11/19/2017 1:29 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Implementing and Managing Azure Multi-factor Authentication
11/19/2017 1:29 PM
Implementing and Managing Azure Multi-factor Authentication
Denis Mihić
Founder and IT Architect
MCT, MCSE: Cloud and Management | MCSE: Server Infrastructure
MCITP | MCTS | MCSA | MCSE:Security
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Agenda Understanding Azure Multi-factor Authentication
11/19/2017 1:29 PM
Agenda
Understanding Azure Multi-factor Authentication
Configuring Azure MFA in the Cloud
Implementing Azure MFA Server On-premises
Duo Security (free software)
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. 2016 Poll of Internet Users Average of 24 online accounts
11/19/2017 1:29 PM
2016 Poll of Internet Users
Average of 24 online accounts
6 unique passwords
73% using duplicate passwords
47% using 5+ year old password
30% confident in passwords
68% wanted better security
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Username and password no longer enough
Azure Multi-factor Authentication
Global service
Second factor of authentication
For Cloud based systems and on-premise systems
Using standard Mobile phones

8. What is multi-factor authentication?
Any two or more of the following factors:
Something you know: a password or PIN.
Something you have: a phone, credit card or hardware token.
Something you are: a fingerprint, retinal scan or other biometric.
Stronger when using two different channels (out-of-band).
01234

9. What is Azure Multi-Factor Authentication?
An Azure Identity and Access management service that prevents unauthorized access to both on-premises and cloud applications by providing an additional level of authentication
Trusted by thousands of enterprises to authenticate employee, customer, and partner access.

10. How It Works
Mobile Apps
Phone calls
Text messages
ALERT

11. Microsoft Azure Multi-Factor Authentication flavors
Azure Multi-Factor Authentication stand-alone
Included in Azure Active Directory Premium
Free for Azure administrators
A subset of Azure MFA functionality included in Office 365

12. Azure MFA vs MFA for Office 365
Azure Multi-Factor Authentication
Administrators can Enable/Enforce MFA to end-users
Yes
Use Mobile app (online and OTP) as second authentication factor
Use Phone call as second authentication factor
Use SMS as second authentication factor
Application passwords for non-browser clients (e.g. Outlook, Lync)
Default Microsoft greetings during authentication phone calls
Remember Me (Public Preview coming in June)*
Custom greetings during authentication phone calls
Fraud alert
MFA SDK
Security Reports
MFA for on-premises applications/ MFA Server.
One-Time Bypass
Block/Unblock Users
Customizable caller ID for authentication phone calls
Event Confirmation
IP Whitelist (currently in Public Preview)*

13. 01234
No devices or certificates to purchase, provision, and maintain
No end user training is required
Users replace their own lost or broken phones
Convenience
Users manage their own authentication methods and phone numbers
Integrates with existing directory for centralized user management and automated enrollment

14. Security Strong multi-factor authentication Real-Time Fraud Alert
PIN option
Security
Reporting and logging for auditing
Enables compliance with NIST Level 3, HIPAA, PCI DSS, and other regulatory requirements

15. Demo u screen-ovima 11/19/2017 1:29 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Activate Azure Active Directory Premium
30 days trial
include Multi-factor authentication

17. 11/19/2017 1:29 PM
Cloud setup
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Demo Multi-Factor Set Up
11/19/2017 1:29 PM
Demo
Multi-Factor Set Up
Creating A Multi-Factor Authentication Provider
Enabling Microsoft Azure Active Directory Users
Integration with Azure AD Premium
Using the On-Premises Multi-Factor Authentication Server
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. On-premise setup

21. 11/19/2017 1:29 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.