Surviving identity management in a hybrid world 2/24/2019 2:49 PM Surviving identity management in a hybrid world Elias Mereb Cloud Solutions Architect, MVP, MCT Charles Pluta Cloud Solutions Architect, MCT © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Overview Do you have multiple identities for your users? 2/24/2019 2:49 PM Overview Do you have multiple identities for your users? (Office 365, Azure, and/or on-prem apps) Are you synchronizing your on-prem AD with Azure? How does Azure AD Connect work? Single identity for multiple services Synchronization across on-prem and Azure (user accounts and passwords) Health monitoring with Azure AD Connect Health © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Deployment Options Prerequisites Express settings Customized settings 2/24/2019 2:49 PM Deployment Options Prerequisites Verified domain, fix on-prem errors, no Server Core Express settings Single forest and password synchronization Customized settings Multiple forests, database options, sign on methods Upgrade from DirSync or Azure AD Sync In-place upgrade or parallel deployment © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise domain user 2/24/2019 2:49 PM Deployment scenario On-premises Active Directory Azure AD Connect Azure AD Office 365 SaaS Apps Single sign-on MFA Enterprise domain user © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Customized Deployment 2/24/2019 2:49 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Best Practices Don’t change the password for the service account 2/24/2019 2:49 PM Best Practices Don’t change the password for the service account Configure the scheduler to have different sync cycles Understand ports requirements Disable unwanted Sync Rules Filtering Organizational units, Groups, Domains and attributes © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session Tech Ready 15 2/24/2019 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2/24/2019 2:49 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.