Microsoft Ignite 2016 4/27/2018 9:00 AM THR2016 Create identity architecture for enterprise organizations using Microsoft Azure Alex Shteynberg, MTC - http://aka.ms/aboutmtc David Crawford, MCS © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

If you want to learn more Microsoft Ignite 2016 4/27/2018 9:00 AM If you want to learn more THR2233 - Overview of Microsoft Identity Ecosystem  9/28/2016 @ 12:30 PM in Expo Hall - MTC THR2251 – Examine Common Architectures for Hybrid Identity  9/29/2016 @ 2:15 PM in Expo Hall - MTC Ignite Identity and Access Management Sessions List at the end Cloud identity for Enterprise Architects + AAD Whitepapers http://aka.ms/cloudarchidentity http://aka.ms/aadpapers More at the end © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What is Microsoft IDaaS? TechReady 23 4/27/2018 9:00 AM What is Microsoft IDaaS? © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Common Customer Scenario Microsoft Ignite 2016 4/27/2018 9:00 AM Common Customer Scenario © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Business Requirements 4/27/2018 9:00 AM Business Requirements Secure and simple collaboration on projects and documents Allow sharing of specific content with partners and customers © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Technical Requirements Microsoft Ignite 2016 4/27/2018 9:00 AM Technical Requirements Protect environment from external threats Audit and log everything that external users are doing Single sign-on to all resources from any device Require strong-authentication when accessing from outside © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Question to the Audience Microsoft Ignite 2016 4/27/2018 9:00 AM Question to the Audience Keep data on-premises or move to O365? © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Data is on-premises SP in Azure IaaS AAD + AAD Proxy AAD AuthN + MFA Microsoft Ignite 2016 4/27/2018 9:00 AM Data is on-premises SP in Azure IaaS RMS Connector Hybrid (my apps, sso, search, etc.) AAD + AAD Proxy Secures an endpoint for your application in the cloud Applications may reside in Azure IaaS or private cloud location Pre-authentication or Pass-through AAD AuthN + MFA Adds level of assurance ACS (B2C in the future) Social identities © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure AD Proxy

Azure AD Proxy (AAD + AAD Proxy) e IaaS (or on - premises) Active Directory Azure Active Proxy SharePoint Pre Authentication Multi-factor Authentication

Data is in O365 AAD Connect + Pswd Hash Sync O365 B2B Microsoft Ignite 2016 4/27/2018 9:00 AM Data is in O365 AAD Connect + Pswd Hash Sync O365 B2B No B2C yet, could use second AAD tenant Integrated services RMS, SSO, Conditional access, reporting, identity protection, etc. © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

O365 Identity Topology Samples

Adatum’s AAD B2B (viral) tenant Trey Research’s B2E tenant 4/27/2018 9:00 AM Azure AD (B2E vs. B2B vs. B2C) Contoso’s Android app Contoso’s B2C tenant contoso.com web app Contoso’s WP app Contoso’s iOS app Adatum’s AAD B2B (viral) tenant todd@adatum.com bob@contoso.com Contoso’s B2E tenant O365 jane@contoso.com adam@contoso.com LOB apps Azure, Workday, Salesforce Social & local accounts B2B invite Trey Research’s B2E tenant alice@treyresearch.com B2B invite © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Identity and Access Management Sessions 4/27/2018 9:00 AM Monday 02:15: BRK2139 Protect your business and empower your users with cloud Identity and Access Management Tuesday 12:30: BRK3107 Connect your on-premises directories to Azure AD and use one identity for all your apps 02:15: BRK3225 Secure access to Office 365, SaaS, and on-premises apps and files with Azure AD and Intune 04:30: BRK3109 Deliver management and security at scale to Office 365 with Azure Active Directory Wednesday 09:00: BRK3111 Manage productivity at scale with Azure Active Directory 11:30: BRK2170 Learn how Unilever modernized IT with Azure Active Directory at the core 02:15: BRK3139 Throw away your DMZ – Azure Active Directory Application Proxy deep-dive 04:00: BRK3181 Secure your web applications with Microsoft identity Thursday 09:00: BRK3252 Use managed domain services on Microsoft Azure 12:30: BRK3182 Secure your native and mobile applications with Microsoft identity and application management 02:15: BRK3110 Respond to advanced threats before they start - identity protection at its best! 04:00: BRK3179 Modernize your app’s consumer identity management with Azure AD B2C 04:30: BRK2067 Manage access to SaaS Applications With Azure Active Directory Friday 09:00: BRK3074 Discover what’s new in Active Directory Federation and Domain Services in Windows Server 2016 10:45: BRK3108 Share corporate resources with your partners using Azure AD B2B collaboration 12:30: BRK3330 Join your Windows 10 devices to Azure AD for anywhere, anytime productivity © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Keep going… Try Enterprise Mobility + Security for free, today: Microsoft Ignite 2016 4/27/2018 9:00 AM Keep going… Try Enterprise Mobility + Security for free, today: www.microsoft.com/en-us/cloud-platform/enterprise-mobility-trial Read the CIO’s guide to Azure Active Directory https://info.microsoft.com/CIOsGuideToAzureAD.html?ls=Website Explore Identity + Access Management www.microsoft.com/identity Learn more from the Azure AD documentation library https://docs.microsoft.com/en-us/active-directory/ Discover Password best practices https://info.microsoft.com/MicrosoftPasswordGuidance.html?ls=Website Check out the new Azure AD webinars https://info.microsoft.com/AADP-Webinar-CLE_AADP-Main-Landing-Page.html?ls=Media Microsoft is a leader in Gartner's IDaaS MQ 2016 https://info.microsoft.com/EMS-IDaaS-MQ-2016.html?ls=Website © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session 4/27/2018 9:00 AM Please evaluate this session Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/27/2018 9:00 AM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.