1. EarlyExperts.net

2. Managing Identities in the Cloud Era with Microsoft Azure Active Directory
Slide Objective: Welcome attendees and introduce topic of IT Camp event
KeithMayer.com
Senior Technical Evangelist
Microsoft – Cloud & Enterprise

3. About.Me( ); 20+ Years as an experienced IT Professional
Network Engineer, IT Manager, Consultant, Trainer
Trained and consulted with thousand of IT Pros WW
An advocate for IT Professionals
My Blog:
Twitter: @KeithMayer
Weekly Office Hours for IT Professionals
Slide Objective: Introduce yourself and any resources you’ve authored.

4. Would Like a Copy of Today’s Slides?
Send to:

5. Session Topics What is Azure? Global Scale Cloud Models
Identity Management Scenarios
Multi-factor Authentication
Pay-As-You-Go
Windows or Linux
Slide Objective: Review topic areas for this module and facilitate Q&A.
Global, Solid, Scalable

6. Identity & Access Active Directory System Center Management
Microsoft Office
10/5/2017
Active Directory
System Center
Windows Intune
PowerShell
Visual Studio / TFS
Identity & Access
Management
BYOD / MDM
Automation
Development / ALM
Slide Objective: Introduce the Microsoft Devices & Services ecosystem and position Microsoft Azure within it.
Key Talking Points:
Microsoft has a comprehensive Devices & Services ecosystem that provides unparalleled agility for secure delivery of applications and data across a broad range of device form factors and leveraging a consistent service model that can span cross-premises from datacenters to the cloud.
To consistently deploy, manage and develop applications, a consistent experience for Identity & Access, Management, Collaboration and Application Development are delivered (CLICK) via
Active Directory
System Center
Windows Intune
PowerShell / System Center 2012 Orchestrator
Visual Studio
Only Microsoft provides a consistent strategy that scales across diverse end-user devices, on-premises datacenters and cloud platforms to give IT Pros the opportunity to build and manage hybrid solutions that leverage the best of all worlds: on-premises datacenters, cloud-scale platforms, enterprise workstations and BYOD devices.
(CLICK) Today, our IT Camp will be focusing specifically on one portion of this overall ecosystem: the Microsoft Azure cloud platform.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Microsoft Azure Global Footprint
Slide Objective: Highlight the world-wide global scale of the Microsoft Azure cloud platform
Key Talking Points:
Using the Microsoft Azure Management Portal, you can provision and manage resources across some of the world’s largest cloud datacenters.
The Microsoft Azure cloud platform is delivered via a network of global datacenters
(CLICK) Four datacenters are located in the North American region ( East, West, North and South US)
2 datacenters are located in European region ( Northern and Western Europe )
2 datacenters are located in Asia region ( Eastern and South Eastern Asia )
2 datacenter are located in Japan
Each of these datacenters contains between 100,000 and 250,000 physical hosts with internal network connectivity ranging from 30Tb to 120Tb of aggregate network bandwidth
Virtualization hosts within each Microsoft Azure datacenter run standard Windows Server 2012 Hyper-V for running tenant VMs – making Hyper-V one of the worlds most widely deployed, tested and scaled virtualization platforms.
Datacenters within the same region are interconnected with redundant 15Gb multi-homed connectivity
Regions are interconnected with redundant 10Gb multi-home connectivity
Datacenters are physically located >400 miles apart for disaster recovery
(CLICK) Six more datacenters have been announced to come online this year: Two in Japan, Two in mainland China and Two is Australia.
(CLICK) In addition, Microsoft Azure also provides and additional 24 locations for hosting the Microsoft Azure Content Distribution Network (CDN). The CDN can be leveraged to globally cache content across a distributed set of caches so that it is in close proximity to user audiences throughout the world for quick delivery.
From the Microsoft Azure Management Portal, you can quickly and cost-effectively manage your own global cloud infrastructure across some of the world’s largest datacenters.

8. 90 countries and territories Australia Austria Belgium Brazil Canada
Chile
Colombia
Costa Rica
Cyprus
Czech Republic
Denmark
Finland
France
Germany
Greece
Hong Kong
Hungary
India
Ireland
Israel
Italy
Japan
Korea
Luxembourg
Malaysia
Mexico
Netherlands
New Zealand
Norway
Peru
Philippines
Poland
Portugal
Puerto Rico
Romania
Russia
Singapore
Spain
Sweden
Switzerland
Trinidad & Tobago UK
United States
Algeria
Argentina 90
countries and territories
Belarus
Bulgaria
China
Croatia
Dominican Rep
Ecuador
Egypt
El Salvador
Estonia
Guatemala
Iceland
Indonesia
Jordan
Kazakhstan
Kenya
Kuwait
Latvia
Liechtenstein
Lithuania
Macedonia
Malta
Montenegro
Morocco
Azerbaijan
Nigeria
Oman
Pakistan
Panama
Paraguay
Qatar
Saudi Arabia
Serbia
Slovakia
Slovenia
South Africa
Sri Lanka
Taiwan
Thailand
Tunisia
Turkey
UAE
Ukraine
Uruguay
Venezuela
Bahrain
Slide Objective:
Discuss Microsoft Azure Country Availability
Key Talking Points:
Microsoft Azure is now available in 90 countries and territories.
Anyone within these countries can sign up for a free trial or a paid subscription to use Microsoft Azure services
Of course you can also host, develop and deliver solutions to any of your customers worldwide
Currently, we are seeing approximately 1,000 new customers onboarding to Microsoft Azure each day.

9. What does Microsoft Azure offer me?+
Infrastructure-as-a-Service
host
IaaS
storage
cdn
virtual machines
virtual network
vpn
traffic manager
build
Platform-as-a-Service
PaaS
caching
identity
mobile services
cloud services
media
SQL database
publish
Software-as-a-Service
SaaS
web sites
Migrate existing Apps & On-demand Dev/Test
Service-oriented building blocks for Apps
Packaged and custom Web Apps

10. Identities everywhere, accessing everything
Build 2012
10/5/2017
Identities everywhere, accessing everything
Microsoft apps
Non-MS cloud-based apps
ISV/CSV apps
Custom LOB apps
Active Directory AD
Slide Objective: Introduce the identity issues that are occurring in organizations today.
Key Talking Points
Segmented identity model for each cloud application – multiple identities to manage and secure for each user
Different credentials for each cloud application – complicates authentication process
Lack of overall visibility around authentication and access reporting
Simple tasks, like password resets, can be time consuming and cumbersome due to different authentication requirements on each platform.
PCs and devices
Consumer identity providers
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Microsoft Azure Active Directory usage scenarios
Windows Server Management Marketing
10/5/2017
Microsoft Azure Active Directory usage scenarios
Microsoft Azure Active Directory
Many applications, one identity repository.
Manage identities and access to cloud applications.
Monitor and protect access to enterprise applications.
Personalized access and Self-Service capabilities.
SaaS apps
Slide Objective: Introduce the key capabilities that Microsoft Azure Active Directory offers to address common identity issues.
Key Talking Points:
Single identity repository
Manage identities for cloud applications
Manage identities for enterprise applications
Allow self-service access to users for authenticating to applications
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Many applications, one identity repository
Windows Server Management Marketing
10/5/2017
Many applications, one identity repository
Active Directory
Connect and Sync Windows Server Active Directory with Microsoft Azure.
Preintegrated popular SaaS apps.
SaaS apps
LOB and custom apps
Consumer identity providers
Easily add custom cloud-based apps. Facilitate developers with identity management.
Slide Objective: Describe the capabilities of Microsoft Azure Active Directory to act as a central identity repository.
Identities and applications in one place.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Delivering a seamless user authentication experience
10/5/2017
Delivering a seamless user authentication experience
Cloud Authentication
Active Directory
Active Directory
DirSync with password hash sync
User attributes are synchronized using DirSync including a password hash, Authentication is completed against Microsoft Azure Active Directory
Federated Authentication
DirSync
Slide Objective: Describe the two ways in which Microsoft Azure Active Directory can be integrated with Windows Server Active Directory for a seamless authentication experience.
Cloud Authentication – DirSync with Password Hash Sync
Federated Authentication – DirSync with ADFS
Active Directory
Active Directory
AD FS
User attributes are synchronized using DirSync, Authentication is passed back through federation and completed against Windows Server Active Directory
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Manage identities and access to cloud applications
Windows Server Management Marketing
10/5/2017
SaaS apps
Manage identities and access to cloud applications
SaaS apps
Comprehensive identity and access management console.
Centralized access administration for preintegrated SaaS apps and other Cloud-based apps.
Secure business processes with advanced access management capabilities.
Slide Objective: Describe the ability to manage identities across cloud applications.
Note: Ability to assign applications to a Group requires Microsoft Azure Active Directory Premium.
IT professional
Your cloud apps ready when you are.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Monitor and protect access to enterprise apps
Windows Server Management Marketing
10/5/2017
Monitor and protect access to enterprise apps
Built-in security features.
XXXXX
Security reporting that tracks inconsistent access patterns.
XXXXX
Step up to Multi-Factor authentication.
Slide Objective: Describe capabilities around monitoring and protecting enterprise applications.
Note: Multi-factor Authentication and advanced security heuristics reporting requires Microsoft Azure Active Directory Premium.
XXXXX
Ensure secure access and visibility on usage patterns for SaaS and cloud-hosted LOB applications.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Personalized access and Self-Service capabilities.
Windows Server Management Marketing
10/5/2017
Personalized access and Self-Service capabilities.
All assigned SaaS apps in one web page for Single Sign On:
The Access Panel
Access Panel Customization
Slide Objectives: Describe Self-Service capabilities for users via Microsoft Azure Active Directory
Note: Access panel customization and self-service password reset requires Microsoft Azure Active Directory Premium.
Self Service Password Reset for cloud users
Users can easily access the SaaS apps they need, using their existing Active Directory credentials.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Review What is Azure? Global Scale Cloud Models
Identity Management Scenarios
Multi-factor Authentication
Pay-As-You-Go
Windows or Linux
Slide Objective: Review topic areas for this module and facilitate Q&A.
Global, Solid, Scalable

18. Get Started for FREE http://aka.ms/MicrosoftAzureFreeTrial
Microsoft Azure IT Camps
azureitcamponline
Visit my Blog