1. Master Modern PaaS for the Enterprise with Azure App Service
Microsoft Ignite 2016
8/1/2018 9:51 AM
BRK3205
Master Modern PaaS for the Enterprise with Azure App Service
Stefan Schackow
Principal Program Manager
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Modern PaaS Web + Mobile + Functions + API
8/1/2018 9:51 AM
Modern PaaS
Web + Mobile + Functions + API
Secure Apps and Secure Network Access
Hybrid across On-premises & Cloud
Scale Up Out and Around the Globe
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Contoso Moments on App Service Environment
Microsoft Ignite 2016
8/1/2018 9:51 AM
Contoso Moments on App Service Environment
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Azure Active Directory
8/1/2018 9:51 AM
Mobile app calls API
Mobile Client
Mobile login against AAD
Contoso Moments
Web + API + Functions
Apps require AuthN Token
Dedicated App Service Plan
App Service Environment
Virtual Network Subnet
Azure Active Directory
(entexample.com)
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Hybrid AuthN w/ AAD + AD FS
Microsoft Ignite 2016
8/1/2018 9:51 AM
Hybrid AuthN w/ AAD + AD FS
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Requires AuthN’d users from AAD
8/1/2018 9:51 AM
Requires AuthN’d users from AAD
Travel web app
Registered w/ Fabrikam AAD
Fabrikam AAD
Fabrikam AAD
--federated with--
On-premises AD
“On-premises”
Contoso Active Directory
“On-premises”
Contoso AD FS Endpoint
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Multi-tier App Topology
Microsoft Ignite 2016
8/1/2018 9:51 AM
Multi-tier App Topology
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. ILB ASE in its own subnet
8/1/2018 9:51 AM
ILB ASE in its own subnet
Internet
NSG
Internet facing
ASE in its own subnet
API App
NSG
MVC web app
vnet-internal traffic
Sql-on-IaaS in subnet
Virtual Network in West US 2
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Geo-Distributed Scale
Microsoft Ignite 2016
8/1/2018 9:51 AM
Geo-Distributed Scale
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Traffic Manager Profile
Internet
8/1/2018 9:51 AM
Traffic Manager Profile
ILB ASE
MVC web app
MVC web app
API App
Internet facing
ASE in its own subnet
Internet facing
ASE in its own subnet
Site-to-Site
Connection
Sql-on-IaaS in subnet
Virtual Network: North Europe
Virtual Network in West US 2
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Summary Run any App Service workload…
8/1/2018 9:51 AM
Summary
Run any App Service workload…
Fully isolated within your corporate vnet…
With access to both cloud and on-premises…
In any of 24 Azure regions around the world
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Useful Links AAD integration with App Service:
8/1/2018 9:51 AM
Useful Links
AAD integration with App Service:
Integrating AAD With On-premises Directories:
Top Level ToC for App Service Environment Info:
Article Explaining Outbound Address Behavior for Apps on ASEs:
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Useful Links ARM Templates for Working with ASEs:
8/1/2018 9:51 AM
Useful Links
ARM Templates for Working with ASEs:
App Settings that Control More Advanced SCM and Runtime Capabilities :
Working with Local Cache and Slots:
Powershell for Azure App Service:
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Related Sessions Bring Azure App Service On-Premises with Azure Stack:
8/1/2018 9:51 AM
Related Sessions
Bring Azure App Service On-Premises with Azure Stack:
BRK2241: Manage App Service on Azure Stack like a boss
Mobile Apps on Azure App Service:
BRK2251: Secure and deploy your mobile apps in Microsoft Azure
Azure Functions on Azure App Service:
BRK2250: Go serverless for the enterprise with Microsoft Azure Functions
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Free IT Pro resources To advance your career in cloud technology
Microsoft Ignite 2016
8/1/2018 9:51 AM
Free IT Pro resources To advance your career in cloud technology
Plan your career path
Microsoft IT Pro Career Center
Cloud role mapping
Expert advice on skills needed
Self-paced curriculum by cloud role
$300 Azure credits and extended trials
Pluralsight 3 month subscription (10 courses)
Phone support incident
Weekly short videos and insights from Microsoft’s leaders and engineers
Connect with community of peers and Microsoft experts
Get started with Azure
Microsoft IT Pro Cloud Essentials
Demos and how-to videos
Microsoft Mechanics
Connect with peers and experts
Microsoft Tech Community
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Please evaluate this session
8/1/2018 9:51 AM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. 8/1/2018 9:51 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.