patterns & practices Symposium 2013 Windows Azure Active Directory Vittorio

directories offer the best model for business applications

traditional directories don’t work too well with cloud workloads

One Cloud Directory for Every Organization

Cloud Apps and Users from Organizations Apps you buyYour LoB AppsApps you sell Your Customers’ Directories Your Directory

Symposium 2013 Agenda  The Directory Pattern  Directory in Action: Windows Azure for Organizations  Your Directory and Line of Business Apps in the Cloud  Your Customer’s Directory and your SaaS Apps in the Cloud

Symposium 2013 Directories

The Directory Approach Direct Reports MemberOf Asset

App Contoso’s On-Premises Directory Anatomy of Windows Azure Active Directory Management Portal Graph API OAuth2 SAML-P WS-Federation Metadata Contoso’s WA AD Tenant Windows Azure Active Directory Dir Sync

Symposium 2013 Directory in Action: Windows Azure for Organizations

Symposium 2013 DEMO  Accessing the Windows Azure Portal With an Organizational Identity

Symposium 2013 Advantages of Using Organizational Identities  Centrally managed provisioning and deprovisioning  Enforceable credential policies  Multiple authentication factor  Better User Experience  Less credentials to remember

Symposium 2013 Your Directory and Your LoB Applications in the Cloud

 Using the ASP.NET tools to connect to Windows Azure AD DEMO

Windows Azure Active Directory OAuth2 SAML-P WS-Federation Metadata Graph API Connecting your LoB App to Windows Azure AD Your LoB App Contoso’s WA AD Tenant

Symposium 2013 The Graph API RESTful Interface to Windows Azure Active Directory  Compatible with OData V3  Uses OAuth 2.0 for Authentication and Role Based Assignment for Application and Users, for Authorization Programmatic access to Windows Azure Active Directory  Objects such as Users, Groups, Contacts, Tenant Information, Licensing, Roles  Support Links such as Member, memberOf, Manager, DirectReport  Differential queries Requests use standard HTTP methods  GET, POST, PATCH, DELETE to create, read, update, and delete directory objects.  Response support XML and JSON, and standard HTTP status codes

Symposium 2013 Your Customer’s Directory & Your SaaS Apps in the Cloud

 Seamless Consent for SaaS Apps DEMO

The Application Publishing Flow Visual Studio Modify your app to - admit multiple tenants - handle consent messages Seller Dashboard Register your app in the Seller Hub - create keys, catalog entries… - paste keys back in the app code App Windows Azure AD Portal

 The SaaS Application Publishing Cycle DEMO

Graph API OAuth2 SAML-P WS-Federation Metadata Management Portal Multi-tenancy and Consent Flow Your SaaS App Contoso’s WA AD Tenant ServicePrincipal Fabrikam’s WA AD Tenant

Symposium 2013 Resources  Get your free tenant at  Download the samples and tutorials at  Give us feedback at US/WindowsAzureAD/ US/WindowsAzureAD/

One Cloud Directory for Every Organization

Symposium 2013 Thanks!  