Protect your data Enable your users Desktop Virtualization Information protection Mobile device & application management Identity and Access Management

Common identity Single sign-on Self-service experiences Comprehensive security and governance Breadth of applications Desktop Virtualization Information protection Mobile device & application management Identity and Access Management

Active Directory: the vision

A comprehensive IAM solution Active Directory is the primary authentication source today across enterprises Active Directory Federation Services integrates with Azure AD and MFA Web Application Proxy provides at the edge pre- authentication Enforce conditional access to resources Identity Manager Delivers self-service identity management Automates lifecycle management across heterogeneous platforms Provides a rich policy framework for enforcing corporate security policies for identity and access Azure Active Directory Cloud directory Cloud authentication Application integration Azure AD Premium includes Multi-Factor Authentication, self- service features, and user CALs for Identity Manager Windows Server Microsoft Identity Manager

On-premises and private cloud Azure Active Directory Azure AD App Proxy Your apps Microsoft Identity Manager 2016

HR system MIM Manager Active Directory Exchange LDAP Oracle DB Finance New employee Departing employee

HR system MIM Manager Windows Server Active Directory LDAP Oracle DB Finance Exchange Online SharePoint Online Azure SaaS app Microsoft Azure Active Directory Azure AD Sync

RoadmapNext Today

Hybrid Sync Scenario CapabilityMIM SyncAzure AD Sync Azure AD Connect On-premises to on-premises Synchronize identities between many on-premises directories, databases and applications Y On-premises to Azure AD Synchronize identities from on-premises systems to Azure AD Y (Azure AD Connector) Y Azure AD to on-premises Write back of identities, groups and passwords from Azure AD to on-premises AD Y Read more at

FIM Sync AD DS Exchange Oracle DB Finance MIM Sync AD DS Exchange Oracle DB Finance Azure AD Sync Azure AD

User activity reports delivered via System Center Service Manager IAM reporting & auditing in FIM May require separate SQL and System Center Data Warehouse hosts Custom reports possible but requires System Center Data Warehouse familiarity

Activity reports are also being delivered via Azure Portal New MIM reporting in Azure AD

MIM CM Server Contacts MIM CM via REST API (OAuth 2.0 protected) Windows Store application Windows Server 2012 R2 ADFS Contacts AD FS for authentication Installs virtual smartcard into Windows

Prepare Which users have privileged access rights? Protect Lifecycle and AuthN protection Operate Users can request elevation Monitor Add'l auditing, alerts & reports

Modernization Updated platform support Certificate Management updated Self-service account unlock added Privileged Access Mgmt. Improved protection of admins Just In Time (JIT) admin access Auditing for alerts and reports Hybrid IAM Self-service password reset with Azure MFA as a gate Hybrid reporting Azure AD and Office365 integration