EMS in action Hugh Simpson-Wells and Mark Riley 2016 Redmond Summit | Identity Without Boundaries

Slides:

Advertisements

Similar presentations

Agenda AD to Windows Azure AD Sync Options Federation Architecture

Advertisements

Azure AD & Office Logon with Username / Password 2. MFA challenge 3. Reply to MFA challenge -1-way or 2-way SMS -Phone call -Mobile Application.

Users expect to be able to work in any location and have access to all their work resources. The explosion of devices has eradicated the standards-

Identity management integration options for Office 365

Peter Ginnegar Technical Solution Professional Microsoft Corporation

Federated sign-in WS-Federation WS-Trust SAML 2.0 Metadata Shibboleth Graph API Synchronize accounts Authentication.

4/17/2017 © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks.

What is Azure Multi-Factor Authentication? An Azure Identity and Access management service that prevents unauthorized access to both on- premises.

IT can provide users with a common identity across on-premises or cloud- based services, leveraging Windows Server Active Directory and Azure Active.

4/17/2017 © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks.

Windows Server 2012 R2 Capabilities for BYOD Scenario Yuri Diogenes Senior Knowledge Engineer Data Center, Devices & Enterprise Client – CSI Team’s Page:

SIM205. (On-Premises) Storage Servers Networking O/S Middleware Virtualization Data Applications Runtime You manage Infrastructure (as a Service)

User Microsoft Account Ex: User Organizational Account Ex: Microsoft Account Windows Azure Active Directory.

Empower Enterprise Mobility Jasbir Gill Azure Mobility.

OUC204. Recently Announced… Identity Integration Options 2 3 Identity Management Overview 1.

Single Sign-On with Microsoft Azure

User Microsoft Account Ex: User Organizational Account Ex: Microsoft Account Microsoft Azure Active Directory.

Microsoft ® Official Course Module 13 Implementing Windows Azure Active Directory.

Empowering people-centric IT Unified device management Access and information protection Desktop Virtualization Hybrid Identity.

Paul Andrew. Recently Announced… Identity Integration Options 2 3 Identity Management Overview 1.

Identity Decision Tree Framework Quick Reference Guides.

Windows Server Active Directory Intranet Managed Access Managed Identities Integrated Business Apps.

Office 365 Directory Synchronization Update: Deploying Password Sync.

Microsoft Ignite /25/2017 9:57 AM

Access and Information Protection Product Overview Andrew McMurray Technical Evangelist – Windows

Get identities to the cloud Mix on-premises and cloud identity for improved PC, mobile, and web productivity Cloud identities help you run your business.

Access resources in a federation partner organization.

Configuration Manager and InTune Gemeinsam oder einsam?

Adxstudio Portals Training

With ADFS and Azure Active Directory

Craig Pringle & Derek Moir

Identities and Azure AD Premium

Slavko Kukrika MVP Connect Windows 10 to the Cloud – Cloud Join.

Why EMS? What benefit does EMS provide O365 customers Manage Mobile Productivity Increase IT ProductivitySimplify app delivery and deployment LOB Apps.

Agenda  Microsoft Directory Synchronization Tool  Active Directory Federation Server  ADFS Proxy  Hybrid Features – LAB.

Hybrid Identity Deep dive Ross Adams 2016 Redmond Summit | Identity Without Boundaries May 25 th 2016 Azure AD

How to build your own EMS Sandbox Frank C. Drewes III 2016 Redmond Summit | Identity Without Boundaries 24 May 2016 Senior Architect

One Foot in the Cloud, Another On-Premises Ross Adams 2016 Redmond Summit | Identity Without Boundaries May 25 th 2016 Azure AD

Enabling the Modern Workstyle with Windows 10 & Azure Active Directory Venkatesh Gopalakrishnan 2016 Redmond Summit | Identity Without Boundaries May 25,

ADFS - Does it Still have a Place? Fitting into the EMS puzzle Frank C. Drewes III 2016 Redmond Summit | Identity.

Azure Active Directory Uday Hegde 2016 Redmond Summit | Identity Without Boundaries May 26, 2016 Group Program Manager, Azure AD

of employees use personal devices for work purposes.* of employees that typically work on employer premises, also frequently work away from their desks.***

Protect your data Enable your users Desktop Virtualization Information protection Mobile device & application management Identity and Access Management.

Protect your data Enable your users Desktop Virtualization Information protection Mobile device & application management Identity and Access Management.

61% of workers mix personal and work tasks in their devices* * Forrester Research: “BT Futures Report: Info workers will erase boundary between enterprise.

Recording Brief EMS Partner Bootcamp Variables Values Module Title

Dr. Authentication Or, How I Learned To Stop Worrying And Love The Azure MFA

Active Directory Modernization Technical competitive comparison

Implementing and Managing Azure Multi-factor Authentication

Azure Active Directory voor Developers

Azure AD for the client management guy (or gal!)

6/25/ :13 PM BRK1076 Make Windows devices more secure by taking them out of your existing infrastructure Chris Rhodes & Andrew Bettany MCTs & MVPs.

9/13/2018 4:54 PM BRK How to get Office 365 to the next level with Azure Active Directory Premium Brjann Brekkan Program Manager Lead – Customer.

Think You Know How To Manage Office 365?

Microsoft Virtual Academy

Office 365 Identity Management

11/15/2018 3:42 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN.

Microsoft Ignite /20/2018 2:21 PM

Access and Information Protection Product Overview October 2013

Microsoft Virtual Academy

Five mistakes to avoid when deploying Enterprise Mobility + Security

Office 365 Identity Management

12/29/2018 8:46 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN.

Matthew Levy Azure AD B2B vs B2C Matthew Levy

AD FS Integration Active Directory Federation Services (AD FS) 7.4

4/9/2019 5:05 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS.

Device Registration and Multi-Factor Authentication

Azure Multi-Factor Authentication (MFA)

Azure AD Simon May Technical Evangelist.

Presentation transcript:

EMS in action Hugh Simpson-Wells and Mark Riley 2016 Redmond Summit | Identity Without Boundaries

Traditionally at this point Active Directory HR SAP Another Dir

Active Directory HR Another Directory AAD Connect SSO

Active Directory HR AAD Connect SSO

What’s driving adoption of EMS?

AD Connect AADP Azure RMS Conditional access Mobile Device Management Agenda

AD is designed for on- premises Active Directory LDAP Kerberos

AAD is designed for the cloud Windows Azure Active Directory SAML-P RESTful Graph API OAUTH and OpenIDConnect WS-Federation Portal

AAD is designed for the cloud

APIs

Active Directory HR SSO Demo environment

Demo AD Connect

AADP

Demo AADP

Azure RMS

Conditional Access

Randomization

Demo Conditional Access Denied/Device Enrollment

Conditional Access On-premises

Overview

Demo Conditional Access

Active Directory Federation Services (ADFS) On-premises

Integration overview User attributes are synchronized including the password hash, Authentication can be completed against either Azure or Windows Server Active Directory User attributes are synchronized, Authentication is passed back through federation and completed against Windows Server Active Directory Synchronization Federation AD FS provides true SSO, conditional access to resources, Work Place Join for device registration and integrated Multi- Factor Authentication Microsoft Azure

AAD Connect with Single Sign-on O365 / Azure STS redirects authentication requests to AD FS STS User authentication is completed against AD Optionally passwords can be sync’d too, for quick fall-back AD

Active Directory Federation Services

Multi-Factor Configuration

Demo Active Directory Federation Services (ADFS)

Multi-Factor Authentication On-premises

AD DS or LDAP On-Premises Apps MFA Server Cloud MFA Cloud Apps 2 Azure Active Directory 1 How it works

MFA for Office 365 (included in Office 365 SKUs) MFA for Azure Administrators (included with Azure Subscription) Azure MFA (Included in AADP/EMS) Administrators can protect accounts with MFA●Administrator accounts only● Mobile app as a second factor●●● Phone call as second factor●●● SMS as second factor●●● App passwords for clients that don’t support MFA●●● Admin control over authentication methods● PIN mode● Fraud alert● MFA Reports● One-Time Bypass● Custom greetings for phone calls● Customizable caller ID for phone calls● Event Confirmation● Trusted IPs● Suspend MFA for remembered devices (Public Preview)●● MFA SDK● MFA for on-premises applications using MFA Server● MFA Versions – Feature Comparison

Authentication Methods Phone CallSMS (2-way) SMS (1-way) Authentication Code App Notification

Demo Multi-Factor Authentication

Mobile Device Management (MDM) Windows Intune

Mobile Device Management (MDM)

Demo Mobile Device Management

Mobile Application Management (MAM) Windows Intune

Mobile Application Management

MAM ‘enlightened’ apps

Demo Mobile Application Management

What is driving EMS adoption?