Download presentation
Presentation is loading. Please wait.
1
6/17/2018 3:45 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
2
Windows 10 Identity Overview
6/17/2018 3:45 AM B8101 Windows 10 Identity Overview Yogesh Mehta Matthew Palko Principal PM Lead Program Manager WDG Enterprise and Security © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
3
TURBULENT TIMES 160 MILLION customer records compromised
6/17/2018 3:45 AM TURBULENT TIMES 160 MILLION customer records compromised 229 DAYS between infiltration and detection $3 MILLION of cost/business impact per breach © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
4
“ Credential theft is today’s crisis
6/17/2018 3:45 AM Yahoo Reveals Massive Breach of Data from 500M Accounts “ …The stolen information, according to Yahoo, could include names, addresses, dates of birth, telephone numbers, password information, and possibly the question-answer combinations for security questions, which are often used to reset passwords,” Paul Blake, ABC News September Credential theft is today’s crisis Source: “Yahoo Reveals Massive Data Breach.. ABC News Sep © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
5
Mobility and the cloud is the new normal
Build 2015 6/17/2018 3:45 AM Mobility and the cloud is the new normal 66% 25% 33% of employees use personal devices for work purposes.* of all software will be available on a SaaS delivery by 2020.** of employees that typically work on employer premises, also frequently work away from their desks.*** *CEB The Future of Corporate ITL: **Forrester Application Adoption Trends: The Rise Of SaaS ***CEB IT Impact Report: Five Key Findings on Driving Employee Productivity Q © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
6
Identity is a means to an end, not the end.
Build 2015 6/17/2018 3:45 AM Empowering every individual to achieve more is… Identity is a means to an end, not the end. © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
7
World without Passwords
Microsoft Ignite 2016 6/17/2018 3:45 AM World without Passwords “One of the biggest security issues is passwords. One of the things that we are working on is a world where passwords are not going to be the ones that you know can get hacked but you really have other biometrics that really help us secure our computing interfaces,” - Satya Nadella MS working on a Password-free world: world-satya-nadella / © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
8
6/17/2018 3:45 AM Demo © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
9
Web Account Manager 6/17/2018 3:45 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
10
Build with Web Account Manager
6/17/2018 3:45 AM Build with Web Account Manager Enable apps and identity providers to plug into Windows Provide single sign-on Extensible framework Link to MSDN: GitHub URL: Previous //BUILD sessions: //BUILD 2015: Secure Single Sign-On with Secure Authentication © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
11
6/17/2018 3:45 AM Windows Hello © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
12
Easy to deploy two-factor password alternative
6/17/2018 3:45 AM WINDOWS HELLO Easy to deploy two-factor password alternative Breach, theft, and phish resistant credentials Single sign-on experience Supports PIN, biometric, and companion devices © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
13
Partnering for success
Microsoft Build 2017 6/17/2018 3:45 AM Partnering for success Strong Authentication WebAuthn © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
14
FIDO Alliance SOME BOARD LEVEL MEMBERS Microsoft Build 2017
6/17/2018 3:45 AM FIDO Alliance SOME BOARD LEVEL MEMBERS © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
15
Build support for Windows Hello
6/17/2018 3:45 AM Build support for Windows Hello Use APIs to add support for Windows Hello in your apps Link to MSDN: GitHub URL: Links to previous //BUILD sessions: //BUILD 2015: Microsoft Passport and Windows Hello: Moving Beyond Passwords and Credential Theft //BUILD 2016: Windows Hello in Microsoft Edge Experiment and prototype with these APIs and give us feedback Visit for more information © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
16
Windows Hello Companion Device Framework
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
17
2nd Factor with Windows Hello
Microsoft Build 2017 6/17/2018 3:45 AM 2nd Factor with Windows Hello Second Factor Private keys secured in TPM First Factor Windows Hello Biometric or PIN © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
18
2nd Factor with Windows Hello Companion Devices
Microsoft Build 2017 6/17/2018 3:45 AM 2nd Factor with Windows Hello Companion Devices PIN Windows Hello Biometric or Second Factor Companion Devices Private keys secured in TPM First Factor © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
19
Companion Device Framework Partners
Microsoft Build 2017 6/17/2018 3:45 AM Companion Device Framework Partners © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
20
Build with Windows Hello CDF
6/17/2018 3:45 AM Build with Windows Hello CDF Use APIs to build support for authentication using Windows Hello companion devices Link to MSDN: GitHub URL: Links to previous //BUILD sessions: //BUILD 2016: Windows Hello Unlock with IoT devices © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
21
6/17/2018 3:45 AM Demo © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
22
6/17/2018 3:45 AM Dynamic Lock © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
23
Ted gets coffee…AND is protected
Build 2015 6/17/2018 3:45 AM Ted gets coffee…AND is protected © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
24
Dynamic Lock Automatically locks your Windows PC when you are not around Improves upon the existing inactivity based timer lock It is not a replacement for explicit device lock (e.g. Win + L)
25
How does it work? Detects user’s presence based on two factors
Microsoft Build 2017 6/17/2018 3:45 AM How does it work? Detects user’s presence based on two factors BT based Phone lock If there is no user activity, Windows checks for device’s presence every 30 seconds If the phone is not found, Windows turns of the screen, and locks the PC after 5 seconds. Companion device based lock Companion device issues explicit lock signal to the PC based on device specific locking logic. © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
26
6/17/2018 3:45 AM Demo © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
27
Want to Try it? Install Windows 10 Creators Update
Microsoft Build 2017 6/17/2018 3:45 AM Want to Try it? Install Windows 10 Creators Update Pair your phone over Bluetooth via Settings Enable Dynamic Lock via Settings Settings / Accounts / Sign-in options / Dynamic lock This can also be managed via SCCM/MDM Computer Configuration / Administrative Template / System / Logon / Configure Dynamic Lock Lock and unlock your PC once Turn off BT on your phone to simulate you walking away, your PC will lock in secs (Settings>>Accounts>>Sign-in options>> Dynamic lock) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
28
Summary of feature sets
Microsoft Build 2017 6/17/2018 3:45 AM Summary of feature sets Different audiences and different features Identity Provider Relying party App Developer IHV Enterprise Dev WAM, Windows Hello Windows Hello Windows Hello, Windows Hello CDF Windows Hello, Windows Hello CDF, Dynamic Lock WAM, Windows Hello, Dynamic Lock © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
29
In Conclusion Build your apps to
6/17/2018 3:45 AM In Conclusion Build your apps to use strong authentication with Windows Hello and Windows Hello Companion devices, and ensure a single sign-on experience using WAM. © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
30
6/17/2018 3:45 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
Similar presentations
