1. Microsoft Ignite 2016
4/27/2018 9:00 AM
THR2016
Create identity architecture for enterprise organizations using Microsoft Azure
Alex Shteynberg, MTC -
David Crawford, MCS
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. If you want to learn more
Microsoft Ignite 2016
4/27/2018 9:00 AM
If you want to learn more
THR Overview of Microsoft Identity Ecosystem 
12:30 PM in Expo Hall - MTC
THR2251 – Examine Common Architectures for Hybrid Identity 
2:15 PM in Expo Hall - MTC
Ignite Identity and Access Management Sessions
List at the end
Cloud identity for Enterprise Architects + AAD Whitepapers
More at the end
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. What is Microsoft IDaaS?
TechReady 23
4/27/2018 9:00 AM
What is Microsoft IDaaS?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Common Customer Scenario
Microsoft Ignite 2016
4/27/2018 9:00 AM
Common Customer Scenario
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Business Requirements
4/27/2018 9:00 AM
Business Requirements
Secure and simple collaboration on projects and documents
Allow sharing of specific content with partners and customers
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Technical Requirements
Microsoft Ignite 2016
4/27/2018 9:00 AM
Technical Requirements
Protect environment from external threats
Audit and log everything that external users are doing
Single sign-on to all resources from any device
Require strong-authentication when accessing from outside
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Question to the Audience
Microsoft Ignite 2016
4/27/2018 9:00 AM
Question to the Audience
Keep data on-premises or move to O365?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Data is on-premises SP in Azure IaaS AAD + AAD Proxy AAD AuthN + MFA
Microsoft Ignite 2016
4/27/2018 9:00 AM
Data is on-premises
SP in Azure IaaS
RMS Connector
Hybrid (my apps, sso, search, etc.)
AAD + AAD Proxy
Secures an endpoint for your application in the cloud
Applications may reside in Azure IaaS or private cloud location
Pre-authentication or Pass-through
AAD AuthN + MFA
Adds level of assurance
ACS (B2C in the future)
Social identities
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Azure AD Proxy

10. Azure AD Proxy (AAD + AAD Proxy)
e IaaS
(or on -
premises)
Active
Directory
Azure Active
Proxy
SharePoint
Pre
Authentication
Multi-factor Authentication

11. Data is in O365 AAD Connect + Pswd Hash Sync O365 B2B
Microsoft Ignite 2016
4/27/2018 9:00 AM
Data is in O365
AAD Connect + Pswd Hash Sync
O365
B2B
No B2C yet, could use second AAD tenant
Integrated services
RMS, SSO, Conditional access, reporting, identity protection, etc.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. O365 Identity Topology Samples

13. Adatum’s AAD B2B (viral) tenant Trey Research’s B2E tenant
4/27/2018 9:00 AM
Azure AD (B2E vs. B2B vs. B2C)
Contoso’s Android app
Contoso’s B2C tenant
contoso.com web app
Contoso’s WP app
Contoso’s iOS app
Adatum’s AAD B2B (viral) tenant
Contoso’s B2E tenant
O365
LOB apps
Azure, Workday, Salesforce
Social & local accounts
B2B invite
Trey Research’s B2E tenant
B2B invite
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Identity and Access Management Sessions
4/27/2018 9:00 AM
Monday
02:15: BRK2139 Protect your business and empower your users with cloud Identity and Access Management
Tuesday
12:30: BRK3107 Connect your on-premises directories to Azure AD and use one identity for all your apps
02:15: BRK3225 Secure access to Office 365, SaaS, and on-premises apps and files with Azure AD and Intune
04:30: BRK3109 Deliver management and security at scale to Office 365 with Azure Active Directory
Wednesday
09:00: BRK3111 Manage productivity at scale with Azure Active Directory
11:30: BRK2170 Learn how Unilever modernized IT with Azure Active Directory at the core
02:15: BRK3139 Throw away your DMZ – Azure Active Directory Application Proxy deep-dive
04:00: BRK3181 Secure your web applications with Microsoft identity
Thursday
09:00: BRK3252 Use managed domain services on Microsoft Azure
12:30: BRK3182 Secure your native and mobile applications with Microsoft identity and application management
02:15: BRK3110 Respond to advanced threats before they start - identity protection at its best!
04:00: BRK3179 Modernize your app’s consumer identity management with Azure AD B2C
04:30: BRK2067 Manage access to SaaS Applications With Azure Active Directory
Friday
09:00: BRK3074 Discover what’s new in Active Directory Federation and Domain Services in Windows Server 2016
10:45: BRK3108 Share corporate resources with your partners using Azure AD B2B collaboration
12:30: BRK3330 Join your Windows 10 devices to Azure AD for anywhere, anytime productivity
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Keep going… Try Enterprise Mobility + Security for free, today:
Microsoft Ignite 2016
4/27/2018 9:00 AM
Keep going…
Try Enterprise Mobility + Security for free, today:
Read the CIO’s guide to Azure Active Directory
Explore Identity + Access Management
Learn more from the Azure AD documentation library
Discover Password best practices
Check out the new Azure AD webinars
Microsoft is a leader in Gartner's IDaaS MQ 2016
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Please evaluate this session
4/27/2018 9:00 AM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. 4/27/2018 9:00 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.