Azure AD & Office Logon with Username / Password 2. MFA challenge 3. Reply to MFA challenge -1-way or 2-way SMS -Phone call -Mobile Application

Microsoft Confidential

8

11

Microsoft Confidential 12

Azure AD & Office One-time setup: User create App Password (1 per application) through MOP or AAD 2. Rich client logon with App Password

 Admin must:  Create a Windows Azure Authentication Provider  Enable Multi-Factor Authentication for the users  App Password available to end-users only  Not available for Administrative accounts  Password is automatically generated  16 characters  A limit of 40 passwords per user  Passwords never expire  Set Expiration feature is schedule for a future release

The traditional perimeter is rapidly eroding IT needs continuous data protection that work across ‘classic ‘boundaries’ Consumerization of IT Users need access, from any device Externalization of IT Applications are on-premises and in the cloud More Data, Stored in More Places Dispersed enterprise data needs protection Social Enterprise Data is shared between people and applications

 Use Windows Azure AD Right Management  Out-of the box  Integrate natively with Exchange online and SharePoint online  Integrate Office 365 with existing on-premises AD RMS infrastructure