 Lynn Ayres Program Manager Identity Services  Tore Sundelin Program Manager Identity Services BB29

“Geneva” Framework Live Framework Windows CardSpace “Geneva” Active Directory “Geneva” Server Microsoft Services Connector Software Services Claims-Based Access Standards Based Enhances Developer Productivity Flexibility via Choice Live ID Microsoft Federation Gateway.Net Access Control Service.Net Access Control Service

Live Framework Standards Based Enhances Developer Productivity Live ID.Net Access Control Service.Net Access Control Service “Geneva” Framework Windows CardSpace “Geneva” “Geneva” Server Microsoft Federation Gateway Microsoft Services Connector Active Directory Software Services Claims-Based Access Flexibility via Choice

Services Revolution

1. Switch from a server (Exchange) to a cloud service 2. Adopt a new service 3. Move an on-premises app to a cloud service How does a business use services without changing their on-premises identity infrastructure? (ex: Active Directory)

Desktop Exchange Azure Services Platform ISV Apps Microsoft Online Microsoft Dynamics CRM Online Windows Live Browser Office Apps ISV AppsSharePoint Enterprise Apps Enterprise Apps Live Mesh Live Mesh Cloud Live Identity Service Active Directory Enterprise On-Premises

IT admin Employees Developers

Federation hub brokers access for Cloud services: Microsoft cloud applications Developers using Azure Services Platform Other businesses using the Gateway Manage one relationship to connect to any service

Free download for quick and easy setup Connects Active Directory to the Gateway and cloud services and applications Protects corporate account security

Desktop Azure Services Platform ISV Apps Browser Office Apps Enterprise Apps Enterprise Apps Microsoft Federation Gateway Live Identity Service Exchange ISV AppsSharePoint Active Directory Active Directory Enterprise On-Premises Microsoft Services Connector Microsoft Services Connector Microsoft Online Microsoft Dynamics CRM Online Windows Live Live Mesh Live Mesh Cloud

 Tore Sundelin Program Manager Identity Services

Registers the enterprise’s domain, sign-in endpoint, and a token signing key Enterprise asserts domain ownership via an SSL cert issued by a trusted CA Ongoing management is automatic Enterprise Server Apps Microsoft Services Connector Microsoft Services Connector Active Directory Active Directory Microsoft Federation Gateway Microsoft Cloud Applications Developer Services

User clicks link for service Desktop Browser Office Apps Enterprise Server Apps Microsoft Services Connector Microsoft Services Connector Active Directory Active Directory Microsoft Federation Gateway Microsoft Cloud Connector validates credentials with Active Directory Connector issues a login token and redirects to Microsoft Federation Gateway Federation Gateway validates token and transforms claims Federation Gateway issues service token and redirects to requested service User accesses service User taken to Microsoft Services Connector for authentication Applications Developer Services

Businesses federate once to connect to any service Services federate once to connect to any business Hub and spoke model abstracts complexity: Endpoint changes, key rollovers, protocol changes, etc.

Microsoft Services Connector Preview available today: Beta in early 2009 Microsoft Federation Gateway Released, available today Whitepaper On-boarding documentation We want your feedback! Forum

© 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.