Authentication solutions for Outlook and Office 365 Multi-factor authentication for Office 365 Outlook client futures

Cloud Identity Single identity in the cloud Suitable for small organizations with no integration to on-premises directories Directory Sync Single identity Suitable for medium and large organizations without federation Federated Identity Single federated identity and credentials suitable for medium and large organizations New in Outlook True federated login with SSO Multi-factor authentication Extensible to third-party IdPs New in Outlook Single sign-on Multi-factor authentication Single sign-on Multi-factor authentication

*For representative purposes only. Targeted Feb 2014 WS-Trust & WS-Federation WS-Federation SAML Active Directory with ADFS Customer Benefits Flexibility to reuse existing identity provider investments Confidence that the solution is qualified by Microsoft Coordinated support between the partner and Microsoft

Cloud Identity Single identity in the cloud Suitable for small organizations with no integration to on-premises directories Directory Sync Single identity Suitable for medium and large organizations without federation Federated Identity Single federated identity and credentials suitable for medium and large organizations New in Outlook True federated login with SSO Multi-factor authentication Extensible to third-party IdPs New in Outlook Single sign-on Multi-factor authentication Single sign-on Multi-factor authentication

Hardware OTP Tokens Certificates Smart Cards Phone-Based Authentication: Phone Call, Text Message, and Push Software OTP Tokens

*Out of band refers to being able to use a second factor with no modification to the existing app UX.  *Out of band refers to being able to use a second factor with no modification to the existing app UX.

www-authenticate: Bearer authorization_uri: Secure Token Service Do federated sign-in using SAML-P, WS-Fed, etc SAML token Validate assertions Hand back token for 365 JWT token Auth against Office JWT token