Using AAD B2C for WordPress & Secure Deployment Scenario 9/14/2018 5:31 AM Using AAD B2C for WordPress & Secure Deployment Scenario Bill Hughes @_billhughes Technical Architect – Concurrency © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Powers 28% of all websites 59% market share of all sites using CMS More than 50,000 plugins available Enables Forums, Blogs, eCommerce, etc…

Azure Active Directory B2C Social IDs Business & Government IDs contoso Customers Apps Analytics CRM and Marketing Automation Business Provide branded (white-label) registration and login experiences Securely authenticate your customers using their preferred identity provider Capture login, preference, and conversion data for customers

WordPress Plugin https://github.com/AzureAD/active-directory-b2c-wordpress-plugin-openidconnect

What we are using https://github.com/AzureAD/active-directory-b2c-wordpress-plugin-openidconnect/pull/14

Demo Using the plugin 9/14/2018 5:31 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Installation & Configuration 1) Create B2C items & Graph API 2) Download plugin from GitHub 3) Unzip, rename & rezip plugin 4) Upload plugin to WordPress 5) Configure plugin settings for: B2C tenant, policy, Graph API, etc…

Demo Plugin Installation & Configuration 9/14/2018 5:31 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Secure and reliable Protect your customers’ identities 9/14/2018 5:31 AM Secure and reliable Users can only view their own accounts and profiles Additional security layers (MFA) Standards-based authentication Security reports and auditing Protect your customers’ identities © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Intelligent protection with Azure Active Directory For MSA 9.8M users marked as compromised monthly 115.5M blocked login attempts or 15.8M credentials daily 1.7M users protected by real-time detection and challenges each day For Azure AD 1M users marked as Med/High risk monthly across 50K tenants 2.4M users marked as at risk monthly over 100K tenants 10K users confirmed to be compromised each month

Build your solution your way for Identity Experts Step-by- step user journeys Open standards Connect to a store or migrate its users Conditional branching Enrich user journeys Connect with existing systems Identity Experts Integrate with any SAML, OIDC, WsFed, or WsTrust-based identity provider Connect to your existing user stores or migrate from those systems seamlessly Connect with existing CRM systems, marketing tools, and databases Use REST APIs to enrich claims and empower user journeys Customize your user journeys with conditional branching Define user journeys between claims providers step-by-step

What does a secure deployment mean?

How to enhance our security 1 Installation = 1 App in B2C Policy Isolation Should my deployment have SSO between installations? Do we need MFA? Secure my configuration Who are my admins? Do I need to consider any compliance scenarios? Who has access to my WordPress DB? Where is my environment hosted?

Resources Docs & samples: https://aka.ms/aadb2c Service blog: https://blogs.msdn.microsoft.com/azureadb2c/ Pricing: https://azure.microsoft.com/en-us/pricing/details/active-directory-b2c/ Feedback: aaddev@microsoft.com UserVoice: https://feedback.azure.com/forums/169401-azure-active-directory/category/160596-b2c © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Free IT Pro resources To advance your career in cloud technology Microsoft Ignite 2016 9/14/2018 5:31 AM Free IT Pro resources To advance your career in cloud technology Plan your career path IT Pro Career Center http://www.microsoft.com/itprocareercenter Get started with Azure IT Pro Cloud Essentials https://www.microsoft.com/itprocloudessentials Demos and how-to videos Microsoft Mechanics https://www.microsoft.com/mechanics Connect with peers and experts Ask questions, get answers, exchange ideas https://techcommunity.microsoft.com Azure Solutions Get started with Azure Solutions today http://azure.com/solutions Azure monthly webinar series Join live or watch on-demand http://aka.ms/AzureMonthlyWebinar © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Q&A

Please evaluate this session Tech Ready 15 9/14/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9/14/2018 5:31 AM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure AD B2B Collaboration 9/14/2018 5:31 AM To B2C or To B2B ? Azure AD B2B Collaboration Azure AD B2C What is it for? IT Pros providing access to their organization’s data and apps to a partner organization & collaborators Developers working on consumer- & citizen-facing mobile & web apps Who is it for? Partner users acting *on behalf of*, i.e., as representatives or employees of their organizations Consumers and citizens acting as themselves Manageability Access reviews, email verification, allowlist/denylist, etc. govern access to host application and resources Self-service: Users manage their own profiles. Discoverability Partner users are discoverable and can see other users from their own organization (subject to policy) Consumers and citizens are invisible to other consumers and citizens. Privacy and consent are paramount. © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.