SaaS Application Deep Dive 9/11/2018 SaaS Application Deep Dive June 2016 Aaron Smalser, Program Manager Jeevan Desarda, Program Manager © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Agenda Module 1 Overview Module 2 Application Types & Concepts 9/11/2018 Azure Active Directory Premium Agenda Module 1 Overview Module 2 Application Types & Concepts Module 3 Scenarios & Requirements Module 4 SaaS Application Technical Deep Dive Module 5 Troubleshooting Module 6 Drive Usage

Module 1 Overview

Overview Overview Key Capabilities User Experience Business Value

Microsoft Azure Active Directory Build 2012 9/11/2018 Azure Cloud Public cloud The big picture… Customers Partners Windows Server Active Directory Microsoft Azure Active Directory On-premises A modern identity management system spanning cloud and on-premises, providing federation, identity management, device registration, user provisioning, application access control & data protection. BYO

Cloud app security problem… Build 2012 9/11/2018 Cloud app security problem… Azure Your Custom App How do I secure and manage user access to cloud apps, and implement single sign on in my organization? Cloud Microsoft Azure Active Directory Other third party app

Solution: Azure Active Directory ISV App Extends Active Directory into the cloud Enables single sign-on to cloud apps using standardized protocols like SAML 2.0, OpenID Connect, and OAuth 2.0 Supports automatic provisioning, de-provisioning, and life cycle management of user accounts for popular apps, using API connectors and standardized protocols like SCIM Office 365 ISV App Other MSFT Apps Azure AD Your Custom IT App Azure AD is designed to meet the needs of SaaS and cloud applications Azure AD can automatically create and update user accounts for selected apps based on assignment in Azure AD. AD

Key Capabilities unified user experience security Integration with SaaS Apps Key Capabilities Easy integration to many of today’s popular SaaS applications unified user experience security centralized application access management unified reporting and monitoring Unified Experience Single sign-on enables users to access their SaaS applications based on their organizational account in Azure AD. Single sign-on is what enables users to authenticate to an application using their single organizational account. Enables user provisioning and de-provisioning into target SaaS based on changes made in Windows Server Active Directory and/or Azure AD. A provisioned account is what enables a user to be authorized to use an application, after they have authenticated through single sign-on. Security Consolidated view to examine suspicious user activities and configuration vulnerabilities Remediation recommendations Risk severity calculations Risk-based policies for protection for future threats Centralized application access management Enables single point of SaaS application access and management, with the ability to delegate application access decision making and approvals to anyone in the organization. Unified reporting and monitoring of user activity in Azure AD. Cloud app discovery- Comprehensive reporting of SaaS app category, number of users, and utilizing volumes. You can also use these reports to detect and mitigate potential security risks.

IT Pro User Experience Guided experience for enabling SSO to apps Manage user access and entitlements in the cloud Enable Conditional Access and MFA per application Built-in security, monitoring, reporting Add benefits for the ITPro to drive setting up.

End User Authentication Experience Single Identity for all applications Web based portal for viewing and launch all assigned apps Only need to remember password for their single organizational identity Users can still access known URLs or bookmarked URLs to launch apps Same authentication experience for all the applications You will not be prompted for username and password for domain joined machine on Windows 10 Add benefits for the ITPro to drive setting up.

Business Value Convenient Inclusive Protected Integration with SaaS apps Business Value Quickly configure your SaaS application for single sign-on and easier user account management. Convenient Easily publish on-premises web apps via Application Proxy and /or Custom apps through a rich standards-based platform. 2600+ popular SaaS apps Inclusive Per application conditional access policies and real time access monitoring for added security. Risks can be mitigated based on the variety of available actions. Protected Provides SSO to Apps integrated with your Azure Active Directory Discover available SaaS applications without signing into the Azure Management Portal Gain visibility into which cloud applications are being used within an organization. See usage graphs based on users, requests, volume of data exchanged. Identify top cloud applications being used in the organization. Simplify the cloud-based administrative tasks Provide the users with a more streamlined sign-in experience Securely and seamlessly manage the user and device identities, both cloud and on-premises, through a unified experience Manage the first- and third-party applications, SaaS and other existing enterprise cloud and on-premises applications through a unified experience

Azure integration with SaaS Apps toolbox Read More Azure integration with SaaS apps Review TechNet Azure integration with SaaS apps Watch Channel 9 Azure integration with SaaS apps- Videos/ Demos Next steps- - For SaaS apps that you find in the App Gallery, Azure AD provides a number of tutorials on how to integrate SaaS apps. - If app is not in App Gallery, you can add it to the Azure AD App Gallery as a custom application. There is much more detail on all of these issues in the Azure.com library, beginning with What is application access and single sign-on with Azure Active Directory..

9/11/2018 1:25 AM © 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.