1 Oxford Identity Summit May, 25 th 2016 CREATING A CITIZEN IDENTITY

2 THE INDIANA IDENTITY STORY The state saved Indiana taxpayers $13.9 million annually IOT acts as a consulting company to most of the state agencies providing in house solutions and projects management. The Secretary of State (SOS) project - One stop shop to setup a new business in Indiana Streamline the registration processes for new businesses. It took an act of congress! Agencies were mandated to participate in INBiz.

3 Providing infrastructure was the easy part. Looked to IOT to provide solution for Citizen ID’s. They had multiple requirements that need to be meet for the Citizen ID’s and authentication. » Self service options » Customer experience » Needed to be secure » Highly available » Scalable THE IOT RESPONSIBILITIES.

4 IOT was challenged to find a place to store all citizen IDs. AD was not a solution for a citizen logon/portal Self service was a must have Finding a technology to do this was the challenge at hand » Other 3 rd party solution » Azure AD Premium » LDAP Microsoft’s B2C was a new offering CHALLENGES IN FINDING A SOLUTION

5 It took a lot of convincing It was in private preview – not production Other Indiana Agencies worried about security issues. At the end of the day, B2C was pitched as a vehicle for authentication, and not as an Identity. ACCEPTANCE OF B2C

6 Low cost – Pay as you grow. Ease of use Self service Highly Available Scalable – 6 million potential identities REST-based Graph API Easy integration with websites. Industry Standard Protocols such as OpenID Connect Secure Logons - MFA First step in creating a place for all Citizen logons. WHY IOT CHOSE B2C

7 DEMO

8 CHALLENGE Verification s Problem – s were coming from “Microsoft on behalf of One Indiana Access” with an address of This configuration was causing several of the s to get blocked by spam filters. Some users where unable to get registered for the site Solutions – s: Worked with the Azure B2C product group to drop “Microsoft on behalf of” from the verification s and set address to

9 CHALLENGE (CONTINUED) Verification s Solutions – Graph API Application: Some users will still unable to create their accounts. Mainly around not getting the verification s. INBIZ has a business hour only support team so users could call in and request an account be created for them. IOT created a simple application that we gave to the support desk via Azure Remote App to create the user accounts

10 CHALLENGE (CONTINUED) Verification s

11 CHALLENGE (CONTINUED) Verification s INBIZ User Creator

12 INBIZ SUCCESSES Over 20,000 registrations. Generated revenue from day one. Minimal Support needed.

13 ONE INDIANA ACCESS Next Steps Move away from separate Sign In and Sign Up policies to the new single Sign-In/Sign-Up policy Create custom and styled Sign-In/Sign Up pages branded for each application. Create a MY Indiana Citizen portal so each citizen has a customized location to access all of their applications for doing business with the State of Indiana.

14 INDIANA AND AZURE Besides Azure B2C, the State of Indiana is using Azure for other workloads Department of Workforce Development With Azure, DWD is able to scale from 1 to 100 Linux VMs in 10 minutes to analyze unemployment. Being to able to then tear down those VMs saves DWD money by not having to keep those VMs around. DWD is also utilizing Azure Automation and SQL DBs

15 INDIANA AND AZURE (CONTINUED) Indiana Economic Development Commission Using Azure Web Apps for their ADX Studio Portal. Having different deployment slots for Dev, UAT and PROD was a huge benefit for the agency Indiana Office of Technology Azure Remote App for access to management tools for Mac users Dev Test Labs for application testing Azure Storage for SharePoint Online migrations

16 INDIANA AND THE CLOUD Microsoft Advanced Threat Analytics Privileged Access Management Azure Multi-Factor Authentication MIM / Self Service Password Reset SharePoint Online / One Drive for Business Exchange Online

17 CONCLUSION IOT now has traction for a true Citizen portal All new applications being written for in.gov will use B2C. Using B2C has opened the door for other workloads to be moved to a cloud solution.