1. 8/1/ :13 PM
BRK2276
Azure Active Directory B2C: Modernize your customer identity management
Saeed Akhter
Senior Program Manager
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. How can businesses securely connect with their customers?
8/1/ :13 PM
How can businesses securely connect with their customers?
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Azure Active Directory B2C
Azure AD B2C
Social IDs
Business & Government IDs
contoso
Customers
Apps
Analytics
CRM and Marketing Automation
Business
Securely authenticate customers with their preferred identity provider
Provide branded registration
and login experiences
Capture login, preference, and conversion data for customers

4. Enterprises rely on Azure Active Directory Built on the same proven platform used by Office 365 and Azure AD
12.8 M
Organizations (+30% YoY)
950M
Users (+45% YoY)
60 B
Authentications per month
56 K
paid Azure AD / EMS customers (+74% YoY)
90 %
of Fortune 500 companies use Azure AD
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. 8/1/ :13 PM
Improve your connection with customers A customer identity and access management system needs to be:
Customer-centric and flexible
Secure and reliable
Ready for every business
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Customer-centric and flexible
Customers can use social IDs
Works with any device and OS
Customize every pixel
White-label: Use your brand
Native support for 36 languages

7. Secure and reliable Protect customer identities
Additional security layers (MFA)
99.9% availability SLA
Massively-scalable
Secure and reliable

8. Ready for every business
Scale: 100s of millions of users
Faster speed to market
Import or integrate user stores
Integrate CRM and marketing
Flexible policy framework
Ready for every business

9. Ready for every business Build apps quickly using built-in templates
Social accounts
Custom attributes
Customize with HTML and CSS
Multifactor authentication 
</>
Built-in Policy
Ready-to-go templates for Sign-up, Sign-in, Edit Profile, Reset Password.
Reach any user. Existing social account or create a local account.
Pixel-perfect control. Your brand, your HTML and CSS.

10. Demo: Sign in any user Configure ready-to-go templates in Azure Portal
8/1/ :13 PM
Demo: Sign in any user Configure ready-to-go templates in Azure Portal
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. 8/1/ :13 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Ready for every business Build complex apps with custom policy
User journeys
Open standards
Optimize
Conversion
Conditional branching
User migration
Connect with REST
Custom Policy
Tailor every step of the user journey
Integrate with existing infrastructure
Connect to or migrate from your existing user stores

13. 8/1/ :13 PM
Demo: Enterprise Identities Authenticate users from Azure Active Directory
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Custom Policy – OpenID Connect Provider
8/1/ :13 PM
Custom Policy – OpenID Connect Provider
<ClaimsProvider>
<Domain>Contoso</Domain>
<DisplayName>Login using Contoso</DisplayName>
<TechnicalProfiles>
<TechnicalProfile Id="ContosoProfile">
<DisplayName>Contoso Employee</DisplayName>
<Protocol Name="OpenIdConnect"/>
<OutputTokenFormat>JWT</OutputTokenFormat>
<Metadata>
<Item Key="METADATA">…/.well-known/openid-configuration</Item>
<Item Key="ProviderName">
<Item Key="client_id">[GUID]</Item>
<Item Key="IdTokenAudience">[GUID]</Item>
<Item Key="response_types">id_token</Item>
<Item Key="UsePolicyInRedirectUri">false</Item>
</Metadata>
<CryptographicKeys>…</CryptographicKeys>
<OutputClaims>…</OutputClaims>
<OutputClaimsTransformations>…</OutputClaimsTransformations>
</TechnicalProfile>
</TechnicalProfiles>
</ClaimsProvider>
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. 8/1/ :13 PM
Demo: Welcome Extensibility and power of the Identity Experience Framework
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Custom Policy – Orchestration Steps
<!-- reads the user, identified by the object identifier for the user -->
<OrchestrationStep Order="3" Type="ClaimsExchange">
<ClaimsExchanges>
<ClaimsExchange Id="AzureADReadUserByObjectIdExchange"
TechnicalProfileReferenceId="AzureADStore-ReadUserByObjectId" />
</ClaimsExchanges>
...
<!– send a welcome after registering -->
<OrchestrationStep Order="5" Type="ClaimsExchange">
<ClaimsExchange Id="AzureFunctionsSendMailWebHookExchange"
TechnicalProfileReferenceId="AzureFunctions-SendMailWebHook" />
</OrchestrationStep>

17. Step #3 – Read User from Directory
<TechnicalProfile Id="AzureADStore-ReadUserByObjectId">
<Metadata>
<Item Key="Operation">Read</Item>
<Item Key="RaiseErrorIfClaimsPrincipalDoesNotExist">true</Item>
<Item Key="UserMessageIfClaimsPrincipalDoesNotExist">User does not exist. You must sign up before you can sign in.</Item>
</Metadata>
<InputClaims>
<InputClaim ClaimTypeReferenceId="objectId" Required="true" />
</InputClaims>
<OutputClaims>
<OutputClaim ClaimTypeReferenceId="displayName" />
<OutputClaim ClaimTypeReferenceId=" "
PartnerClaimType="signInNames. Address" />
<OutputClaim ClaimTypeReferenceId="extension_Brand" />
...

18. Step #5 – Send welcome email
8/1/ :13 PM
Step #5 – Send welcome
<TechnicalProfile Id="AzureFunctions-SendMailWebHook">
<DisplayName>Send Mail Web Hook Azure Function</DisplayName>
<Protocol Name="Proprietary"
Handler="Web.TPEngine.Providers.RestfulProvider, …" />
<Metadata>
<Item Key="ServiceUrl">
</Item>
<Item Key="AuthenticationType">None</Item>
<Item Key="SendClaimsIn">Body</Item>
</Metadata>
<InputClaimsTransformations>
<InputClaimsTransformation ReferenceId="CreateFromMailAddress" />
</InputClaimsTransformations>
<InputClaims>
<InputClaim ClaimTypeReferenceId="fromMailAddress"
PartnerClaimType="fromAddress" />
<InputClaim ClaimTypeReferenceId=" " PartnerClaimType="toAddress" />
<InputClaim ClaimTypeReferenceId="extension_Brand“
PartnerClaimType="brand" />
<InputClaim ClaimTypeReferenceId="displayName" />
</InputClaims>
<UseTechnicalProfileForSessionManagement ReferenceId="SSOSession-Noop" />
</TechnicalProfile>
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. ‟ State of Indiana creates a one-stop government portal
By Diego Delso, CC BY-SA 3.0,
8/1/ :13 PM
By derivative work: Massimo Catarinella - Image:Indiana_State_Capitol_rect_pano.jpg, CC BY-SA 3.0,
State of Indiana
creates a one-stop government portal ‟
With B2C we have the ability for our Indiana residents to create a secure, easy to use and highly available ID that will allow them to safely do business with the State. Our initial deployment of B2C with the Indiana Secretary of State’s Inbiz application has been an overwhelming success allowing Indiana to generate new revenue from day 1 of go-live”
— Bryan Long, Cloud Architect, Indiana Office of Technology
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. ‟ Real Madrid brings the stadium closer to 450 million fans
8/1/ :13 PM
Real Madrid
brings the stadium closer to 450 million fans ‟
Azure Active Directory B2C helps us bring the stadium closer to our 450 million fans around the globe with simplified registration and login through social accounts like Facebook, or traditional username/passwords login.”
— Rafael De Los Santos, Head of Digital, Real Madrid
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Next steps Try it today, get started here: aka.ms/aadb2c
Ask a question:
stackoverflow.com/questions/tagged/azure-ad-b2c

22. Please evaluate this session
Tech Ready 15
8/1/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. 8/1/ :13 PM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.