1. Using AAD B2C for WordPress & Secure Deployment Scenario
9/14/2018 5:31 AM
Using AAD B2C for WordPress & Secure Deployment Scenario
Bill
Technical Architect – Concurrency
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Powers 28% of all websites
59% market share of all sites using CMS
More than 50,000 plugins available
Enables Forums, Blogs, eCommerce, etc…

3. Azure Active Directory B2C
Social IDs
Business & Government IDs
contoso
Customers
Apps
Analytics
CRM and Marketing Automation
Business
Provide branded (white-label) registration and login experiences
Securely authenticate your customers using their preferred identity provider
Capture login, preference, and conversion data for customers

4. WordPress Plugin

5. What we are using

6. Demo Using the plugin 9/14/2018 5:31 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Installation & Configuration
1) Create B2C items & Graph API
2) Download plugin from GitHub
3) Unzip, rename & rezip plugin
4) Upload plugin to WordPress
5) Configure plugin settings for:
B2C tenant, policy, Graph API, etc…

8. Demo Plugin Installation & Configuration 9/14/2018 5:31 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Secure and reliable Protect your customers’ identities
9/14/2018 5:31 AM
Secure and reliable
Users can only view their own accounts and profiles
Additional security layers (MFA)
Standards-based authentication
Security reports and auditing
Protect your customers’ identities
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Intelligent protection with Azure Active Directory
For MSA
9.8M users marked as compromised monthly
115.5M blocked login attempts or 15.8M credentials daily
1.7M users protected by real-time detection and challenges each day
For Azure AD
1M users marked as Med/High risk monthly across 50K tenants
2.4M users marked as at risk monthly over 100K tenants
10K users confirmed to be compromised each month

11. Build your solution your way for Identity Experts
Step-by- step user journeys
Open standards
Connect to a store or migrate its users
Conditional branching
Enrich user journeys
Connect with existing systems
Identity Experts
Integrate with any SAML, OIDC, WsFed, or WsTrust-based identity provider
Connect to your existing user stores or migrate from those systems seamlessly
Connect with existing CRM systems, marketing tools, and databases
Use REST APIs to enrich claims and empower user journeys
Customize your user journeys with conditional branching
Define user journeys between claims providers step-by-step

12. What does a secure deployment mean?

13. How to enhance our security
1 Installation = 1 App in B2C
Policy Isolation
Should my deployment have SSO between installations?
Do we need MFA?
Secure my configuration
Who are my admins?
Do I need to consider any compliance scenarios?
Who has access to my WordPress DB?
Where is my environment hosted?

14. Resources Docs & samples: https://aka.ms/aadb2c
Service blog:
Pricing:
Feedback:
UserVoice:
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Free IT Pro resources To advance your career in cloud technology
Microsoft Ignite 2016
9/14/2018 5:31 AM
Free IT Pro resources To advance your career in cloud technology
Plan your career path
IT Pro Career Center
Get started with Azure
IT Pro Cloud Essentials
Demos and how-to videos
Microsoft Mechanics
Connect with peers and experts
Ask questions, get answers, exchange ideas
Azure Solutions
Get started with Azure Solutions today
Azure monthly webinar series
Join live or watch on-demand
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Q&A

17. Please evaluate this session
Tech Ready 15
9/14/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. 9/14/2018 5:31 AM
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Azure AD B2B Collaboration
9/14/2018 5:31 AM
To B2C or To B2B ?
Azure AD B2B Collaboration
Azure AD B2C
What is it for?
IT Pros providing access to their organization’s data and apps to a partner organization & collaborators
Developers working on consumer- & citizen-facing mobile & web apps
Who is it for?
Partner users acting *on behalf of*, i.e., as representatives or employees of their organizations
Consumers and citizens acting as themselves
Manageability
Access reviews, verification, allowlist/denylist, etc. govern access to host application and resources
Self-service: Users manage their own profiles.
Discoverability
Partner users are discoverable and can see other users from their own organization (subject to policy)
Consumers and citizens are invisible to other consumers and citizens. Privacy and consent are paramount.
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.