1. Surviving identity management in a hybrid world
2/24/2019 2:49 PM
Surviving identity management in a hybrid world
Elias Mereb
Cloud Solutions Architect, MVP, MCT
Charles Pluta
Cloud Solutions Architect, MCT
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Overview Do you have multiple identities for your users?
2/24/2019 2:49 PM
Overview
Do you have multiple identities for your users?
(Office 365, Azure, and/or on-prem apps)
Are you synchronizing your on-prem AD with Azure?
How does Azure AD Connect work?
Single identity for multiple services
Synchronization across on-prem and Azure (user accounts and passwords)
Health monitoring with Azure AD Connect Health
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Deployment Options Prerequisites Express settings Customized settings
2/24/2019 2:49 PM
Deployment Options
Prerequisites
Verified domain, fix on-prem errors, no Server Core
Express settings
Single forest and password synchronization
Customized settings
Multiple forests, database options, sign on methods
Upgrade from DirSync or Azure AD Sync
In-place upgrade or parallel deployment
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Enterprise domain user
2/24/2019 2:49 PM
Deployment scenario
On-premises Active Directory
Azure AD Connect
Azure AD
Office 365
SaaS Apps
Single sign-on
MFA
Enterprise domain user
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Demo Customized Deployment 2/24/2019 2:49 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Best Practices Don’t change the password for the service account
2/24/2019 2:49 PM
Best Practices
Don’t change the password for the service account
Configure the scheduler to have different sync cycles
Understand ports requirements
Disable unwanted Sync Rules
Filtering
Organizational units, Groups, Domains and attributes
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Please evaluate this session
Tech Ready 15
2/24/2019
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. 2/24/2019 2:49 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.