1. Azure Information Protection
Chris Lloyd
September 29, 2016
Architect

2. Who is OCG?
15+ year focus on identity and access management, enterprise mobility, and security
Microsoft Partner of the Year 7 times including
Delivered more than 700 enterprise projects from the US, UK, Netherlands and Germany
Trained over 6,000 students on Microsoft technologies
Enabling the Business with Hybrid Identity
Basic “Who are OCG?” – there is a bunch more stuff below that used to be on various slides – jut sin case you want more facts
MICROSOFT
Built demos for the MS Field (FIM and BHOLD)
Built SI integration guides for the Office 365 project converted 80 schools (>5 million accounts)
Working with AD / ADFS, AAD, RMS, and FIM engineering teams on future releases
BHOLD customer implementations (1, complete, 4 started and 12 in queue)
Architectures for Hybrid ID infrastructure (FIM, ADFS, AAD, ACS, Azure Apps)
Co-marketing
Webinars with the Azure team
US & UK summits with PG
Regional summits
v-TSP program for US EPG
v-Smart Card with Global Foundation Services
Bridging on premise RMS with O365 RMS
Identity Governance model that helps presales for BHOLD
R2 TAP participation with clients
KEY DIFFERENIATORS AND SKILLS
FIM 2010 R2 RBAC (BHOLD)
More FIM deployments globally than anyone else (60+), 600 IdA deployments
More FIM consultants globally than anyone else (60+)
Custom FIM MAs:
iSeries (Boyd Gaming and ASB), O365 (Air Products)
BES, Intercede CMS, SAP, Google Apps, Oracle
Many, many more
Custom FIM Workflows :
Command File, Multi-tiered Approval
Manager Delegation
FIM Portal customization
BHOLD Integration for Roles & GRC
FIMalyzer documentation tool and Code Library
!ocgtechnical group – hive mind of FIM experts collaborating and sharing
ADFS
SAML 2.0 to 1.1 protocol converter, E2E federation, Cloud federation
Custom interface development
RMS (identity based data loss protection DLP)
On-premise and O365, Titus reseller
FIM CM, PKI Applications
Smart Cards, Virtual Smart Cards, OTP
AD CS, HSM
Under contract with Microsoft architecting their internal PKI infrastructure
Office 365/Windows Azure Active Directory
Over 5m users created in Office 365
Developed FIM management agent for Office 365 – full understanding of options for synchronization
Leading in developing MFA /collaboration use case approaches with Microsoft
"Identity is the new control plane” Alex Simons, Director of Program Management, Microsoft

3. Today’s Challenges IT Users Devices Apps Data Employees Customers
Business partners

4. Identity Bound Protection
Secured data Company external
Disparate storage requires the data itself to be protected
Managed devices
Company internal
External sharing of data requires identity-bound data protection
Your perimeter
Company internal

5. Data Classification Usually done after the document is created
No one knows what is sensitive.
Enforcement is complicated.

6. Azure Information Protection

7. Microsoft Information Protection
Classification and labeling
Encryption and rights management
Simple one-click process
Tracking and reporting

8. Hybrid Identity Integration Active Directory Authentication
Sync
Rights Management Services
Authentication
and collaboration
Have Office 365, AD Sync, SharePoint online,
BOY Key or
Microsoft managed
Key Management
Rights management service provided in Azure cloud
Complete Sync of AD info to Azure AD
End users access Azure RMS from desktops and mobile
Simple, secure collaboration to external organizations for Azure AD Trust Fabric

9. Rights Management 101
Usage rights and symmetric key stored in file as ‘license’
License protected by customer-owned RSA key
Protect
Use Rights +
Unprotect
Water
Sugar
Brown #16
Water
Sugar
Brown #16
()&(*7812(*:
Each file is protected by a unique AES symmetric
Secret cola formula

10. Application Support Office Subscription Client OS Applications
E3, E4, or E5
Client OS
Windows 10, 8.1, 8, 7 with SP1
Applications
Office 2010, 2013 with SP1, 2016
GA features will include PDF, video,
And picture support.

11. Demo

12. Upcoming Webinars Topic Presenter Date Azure B2B and B2C Overview
Register here:
Topic
Presenter
Date
Azure B2B and B2C Overview
Jose Rojas & Sarat Subramaniam, Microsoft
10/13/16, 9am Pacific
A Guide to MIM with Service Pack 1
James Cowling, OCG CTO
10/20/16, 8am Pacific
Introduction to the Ed-Fi Alliance
Richard Charlesworth, YES Prep Public Schools
10/27/16, 11am Pacific

13. Follow OCG on Twitter Follow OCG on LinkedIn @OCGUSOfficial
Page: Oxford Computer Group US

14. Thank you! Any questions? Chris.Lloyd@oxfordcomputergroup.com @lloydcp