1. One Foot in the Cloud, Another On-Premises Ross Adams 2016 Redmond Summit | Identity Without Boundaries May 25 th 2016 Azure AD #OCGUS16 @OCGUSOfficial

2. IT superhero

3. How can I leverage the cloud to… Lower costs Improve scalability Increase flexibility Enhance Productivity Enable collaboration Embrace Mobility IT HERO Improve Security

4. I know what my CEO and users want… Any DeviceAny PlaceAny timeTo all their apps Using their corporate identity

5. The Current Reality…

7. Azure Active Directory: Our Focus A modern identity management system spanning cloud and on-premises, providing a common control plane to manage your identities, credentials, devices, applications and accesses to them.

8. Changing the center of gravity to the cloud AAD

9. Components of our strategy Common access plane for all apps Devices and Infra shift to cloud Credentials and Identities managed from cloud Reduce friction to cloud “On-prem sees Cloud as authority” “On-prem transitions key infra to cloud” “On-prem begins to ‘trust’ Cloud” “Cloud ‘trusts’ on-prem” 1 2 3 Increasing security, monitoring and IT governance value

10. Hybrid Value Faster

11. Hybrid Value Faster. Leverage AAD to…

12. Increase flexibility Enhance Productivity Enable collaboration Embrace Mobility

13. The first step

14. Azure AD Connect

15. Easy onboarding—closing thoughts

16. Lower costs Enhance Productivity Embrace Mobility Improve Security

17. Great O365/SaaS experience!

18. Azure AD Application Proxy Connector Http://sales Http://app1 Http://app2 Connector

19. What can I publish

20. Publishing SharePoint on-prem through Azure AD Demo https://aka.ms/SharePointwithAppProxy

21. Anywhere/Any device access to on-prem apps—closing thoughts

22. Lower costsEnhance Productivity

23. Those support calls are costly!!

24. Self Service Password Reset

25. Group management

26. Self-service extends on-prem: Closing thoughts

27. Lower costs Improve scalability Increase flexibility

28. Reducing footprint on-prem Traditional approaches are cumbersome

29. Azure AD Domain Services Azure Active Directory Domain Services Azure Active Directory Windows Server Active Directory Your virtual network Your Azure IaaS workloads/apps Azure

30. Moving legacy apps to cloud: Closing thoughts

31. Lower costs Increase flexibility Enhance Productivity Enable collaboration Embrace MobilityImprove Security

32. Conditional Access Control On-Premises applications Application Per-service Managed client app Other Inside corp. network Outside corp. network Devices Authenticated MDM Managed (Intune) Compliant with policies Not lost/stolen User attributes User identity Group memberships Auth strength (MFA) Risk score Conditional access control

33. AAD Control plane extends on- prem

34. Cloud analytics for on- premises

35. Secure control plane for on-prem apps: Closing thoughts

36. Thank you! Questions? Ross.adams@microsoft.co m