4. User Microsoft Account Ex: alice@outlook.com User Organizational Account Ex: alice@contoso.com Microsoft Account Microsoft Azure Active Directory

6. *For representative purposes only.

11. 

21. www-authenticate: Bearer authorization_uri: https://login.windows.net SAML token Validate assertions Hand back token for 365 JWT token Auth against https://login.windows.net... JWT token

24. Multi-Factor Authentication for Office 365 Microsoft Azure Multi-Factor Authentication Administrators can Enable/Enforce MFA to end-usersYes Use Mobile app (online and OTP) as second authentication factorYes Use Phone call as second authentication factorYes Use SMS as second authentication factorYes App passwords for non-browser clients (e.g., Outlook, Lync)Yes Default Microsoft greetings during authentication phone callsYes Remember Me (Public Preview coming in June)Yes IP Whitelist (currently in Public Preview)Yes Custom greetings during authentication phone callsYes Fraud alertYes Event ConfirmationYes Security ReportsYes Block/Unblock UsersYes One-Time BypassYes Customizable caller ID for authentication phone callsYes MFA Server – MFA for on-premises applicationsYes MFA SDK – MFA for custom appsYes

25. 2 1

30. www.microsoft.com/learning http://microsoft.com/msdn http://microsoft.com/technet http://channel9.msdn.com/Events/TechEd