11 | Managing User Info Jeremy Foster Michael Palermo

Authentication and user identity Managing user contacts Managing user appointments Module Overview

Authentication & User Identity

Authentication Hey, I'm Joe Dirt.

Authorization Could I see that medical record please? Joe Dirt

Credential Locker The credential locker is a convenient and secure way to store user credentials that your app uses to connect to services like media, social networking, and so on. You can store a user's user ID and password in the credential locker, and then automatically log them on to services when they use your app. Credentials stored in the credential locker automatically roam with a user's Microsoft Account.

DEMO MSDN: Credential Locker

Web Authentication Broker The web authentication broker supports the OAuth and OpenID internet authentication protocols, so you can integrate your app with a web service that provides user authentication. This allows you to utilize user identity in your apps from services such as Facebook, Flickr, Google, and Twitter. You can also use the web authentication broker to enable single sign-on (SSO) for multiple internet authenticated apps.

Fingerprint Authentication Fingerprint (biometric) verification enables you to enhance the security of your app by requesting a fingerprint when the user is required to consent to a particular action such as authorizing an in-app purchase, or accessing a restricted resource.

DEMO MSDN: User Consent Verifier

Certificate Authentication Certificate authentication provides a high level of trust when authenticating a user. Apps that require secure authentication beyond a user ID and password combination can use certificates for authentication.

Enterprise Authentication Enterprise authentication enables users of your app to authenticate using Windows domain credentials. Enterprise authentication is commonly used for line-of-business apps where users require access to corporate resources that are part of a domain. Examples include access to corporate web or SharePoint sites, or access to files on a corporate network using the file picker control. To include enterprise authentication in your app, enable the Enterprise Authentication capability in your app manifest.

Microsoft Account (Live Services) You can sign users in to their Microsoft account, so that your app will work with Microsoft cloud services like Outlook.com and Microsoft OneDrive.

DEMO codeShow: Live Authentication

Credential Picker You can use the credential picker to present your users with the Windows UI for entering user names and passwords. This presents your user with a consistent experience when entering their credentials.

DEMO MSDN: Credential Picker

DEMO codeShow: WAMS Authentication

Managing User Contacts

DEMO MSDN: Contact Picker

Managing User Appointments

DEMO MSDN: Appointments API

Authentication and user identity Managing user contacts Managing user appointments Summary

©2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, Office, Azure, System Center, Dynamics and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.