Microsoft Ignite 2015 4/16/2017 3:28 PM © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Identity and Access Management Everywhere BRK3863 Identity and Access Management Everywhere Adam Bresson, Sr. Product Marketing Manager @heyadam Nasos Kladakis, Sr. Product Marketing Manager @Akladakis #AzureAD Enterprise Mobility – Identity and Access Management

Empower Enterprise Mobility Enable your users People-centric approach Protect your data User Devices Apps Data IT Unify your environment

Empower Enterprise Mobility Desktop Virtualization Enable your users Protect your data User IT Identity and Access Management Information protection Mobile device & application management

The current reality… On-Premises Private Cloud Managed devices 4/16/2017 The current reality… EC2 On-Premises Private Cloud Managed devices © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Identity as the control plane Build 2012 4/16/2017 Identity as the control plane Simple connection Self-service Single sign on ••••••••••• Username Other Directories Windows Server Active Directory On-premises Cloud SaaS Azure Office 365 Public cloud Microsoft Azure Active Directory

What is Azure Active Directory? A comprehensive identity and access management cloud solution. It combines directory services, advanced identity governance, application access management and a rich standards-based platform for developers It is available in 3 editions: Free, Basic and Premium

10x Discover all SaaS apps in use within your organization Source: Help Net Security 2014 as many Cloud apps are in use than IT estimates Microsoft Azure Active Directory Cloud App Discovery SaaS app category Number of users Utilization volume Comprehensive reporting

Demo Cloud App Discovery

Windows Server Management Marketing 4/16/2017 Your Directory on the cloud Centrally managed identities and access. Monitor and protect access to cloud applications. Empower Users © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows Server Management Marketing 4/16/2017 Your Directory on the cloud Centrally managed identities and access. Monitor and protect access to cloud applications. Empower Users © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Your Directory on the cloud Windows Server Management Marketing 4/16/2017 Your Directory on the cloud Cloud HR Apps Microsoft Azure Active Directory Microsoft Identity Manager HR Systems LDAP v3 SQL (ODBC) Web Services ( SOAP, JAVA, REST) © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Your Directory on the cloud Windows Server Management Marketing 4/16/2017 Your Directory on the cloud Cloud HR Apps Connect and Sync on-premises directories with Azure. Microsoft Azure Active Directory Azure Active Directory Connect Other Directories HR Systems LDAP v3 SQL (ODBC) Web Services ( SOAP, JAVA, REST) © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Your Directory on the cloud Windows Server Management Marketing 4/16/2017 Your Directory on the cloud Connect and Sync on-premises directories with Azure. 2400+ Preintegrated popular SaaS apps. Microsoft Azure Active Directory SaaS apps Other Directories © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Preintegrated SaaS apps in the application gallery Build 2012 4/16/2017 Preintegrated SaaS apps in the application gallery © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Your Directory on the cloud Windows Server Management Marketing 4/16/2017 Your Directory on the cloud Microsoft Azure Other Directories Connect and Sync on-premises directories with Azure. 2400+ Preintegrated popular SaaS apps. SaaS apps Web Apps (Azure Active Directory Application Proxy) Integrated custom apps Easily publish on-prem web apps via Application Proxy + Custom apps through a rich standards-based platform. Identities and applications in one place. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

https://app1-contoso.msappproxy.net/ 4/16/2017 3:28 PM Azure Active Directory Application Proxy Microsoft Azure Active Directory A connector that auto connects to the cloud service https://app1-contoso.msappproxy.net/ Application Proxy Multiple connectors can be deployed for redundancy, scale, multiple sites and different resources Connectors are deployed usually on corpnet next to resources Users connect to the cloud service that routs their traffic to the resources via the connectors DMZ Corporate Network Connector Connector http://app1 Resource Resource Resource © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Centrally managed identities and access Windows Server Management Marketing 4/16/2017 Centrally managed identities and access SaaS apps Comprehensive identity and access management console. Centralized access administration for preintegrated SaaS apps and other Cloud-based apps. Dynamic Groups, Secure business processes with advanced access management capabilities. IT professional Your cloud apps ready when you are. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Monitor and protect access to enterprise apps Windows Server Management Marketing 4/16/2017 Monitor and protect access to enterprise apps Built-in security features. Security reporting that tracks inconsistent access patterns, analytics and alerts. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Monitor and protect access to enterprise apps Windows Server Management Marketing 4/16/2017 Monitor and protect access to enterprise apps Built-in security features. XXXXX Security reporting that tracks inconsistent access patterns, analytics and alerts. XXXXX Step up to Multi-Factor authentication. XXXXX © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Monitor and protect access to enterprise apps Windows Server Management Marketing 4/16/2017 Monitor and protect access to enterprise apps Built-in security features. Security reporting that tracks inconsistent access patterns, analytics and alerts. XXXXX Step up to Multi-Factor authentication. XXXXX Access policies based on location, user and device state © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Application Access policies User Actions Cloud Apps Allow Access Conditions Location (IP Range) On-premises Device State* User Group Enforce MFA per user/per app Block Access

Demo Azure Active Directory administrative tasks

Windows Server Management Marketing 4/16/2017 Empower Users Company branded, personalized application Access Panel : http://myapps.microsoft.com + Mobile Apps Manage your account © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows Server Management Marketing 4/16/2017 Empower Users Company branded, personalized application Access Panel : http://myapps.microsoft.com + Mobile Apps Manage your account Self Service Password Reset and application access requests © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo End User Experience

Azure Active Directory 12-month investments 4/16/2017 Azure Active Directory 12-month investments Business to Business B2C Privileged Identity Management Administrative Units Conditional Access Azure Active Directory Join (Windows 10) © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Q&A

Related Content BRK3863: Identity and Access Management Everywhere 4/16/2017 3:28 PM Related Content BRK3863: Identity and Access Management Everywhere BRK3851: Real Customer Stories for Azure Active Directory Premium BRK3862: Extending On-Premises Directories to the Cloud Made Easy with Azure AD Connect BRK3864: Enable Your On-Premises Apps for the Cloud with Microsoft Azure AD Application Proxy BRK3865: How Microsoft Azure AD Helps Prevent, Detect and Remediate Attacks to Your Enterprise BRK3867: Microsoft Identity Platform for Developers: Overview and Roadmap BRK3854: How Microsoft IT Manages Identity in a Hybrid Cloud World BRK3332: Microsoft Azure Active Directory and Windows 10: Better Together for Work or School BRK4850: Developing Web and Cross Platform Mobile Apps with Azure Active Directory BRK3873: Protecting Windows and Microsoft Azure AD with Privileged Access Management BRK3857: Upgrading from FIM to Microsoft Identity Manager and Azure Active Directory © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session 4/16/2017 3:28 PM Please evaluate this session Your feedback is important to us! Visit Myignite at http://myignite.microsoft.com or download and use the Ignite Mobile App with the QR code above. © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/16/2017 3:28 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.