1. Microsoft Build 2016
9/20/2018 2:46 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Microsoft identity: State of the Union and Future Directions
Microsoft Build 2016
9/20/2018 2:46 PM
#B868
Microsoft identity: State of the Union and Future Directions
Vittorio Bertocci
Program Manager
@vibronet
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. …The BEST identity system for ALL developers.
Microsoft Build 2016
9/20/2018 2:46 PM
…The BEST identity system for ALL developers.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Agenda Microsoft identity vision Getting there 9/20/2018 2:46 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Microsoft identity vision
9/20/2018 2:46 PM
Microsoft identity vision
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. What does the BEST identity system for ALL developers look like?
9/20/2018 2:46 PM
What does the BEST identity system for ALL developers look like?
Reaches the audience you want
Great fundamentals
Works great with your solution
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Reaches the audience you want
Microsoft Build 2016
9/20/2018 2:46 PM
Reaches the audience you want
CLOUD DIRECTORIES
LOCAL ACCOUNTS
FEDERATION CAPABLE IDPs
EMERGING IDPs
OPENID CONNECT CAPABLE IDPs
ACTIVE DIRECTORY
ON PREMISES DIRECTORIES
ESTABLISHED SOCIAL IDPs
Organizations
Individuals
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. The importance of strong fundamentals…
Microsoft Build 2016
9/20/2018 2:46 PM
The importance of strong fundamentals…
Constantly evolving, enterprise grade security
High scale, availability, performance, disaster recovery, compliance, geo replication
Privacy features, locality, sovereign clouds
Affordable, pay as you go
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Works great with your solution
Microsoft Build 2016
9/20/2018 2:46 PM
Works great with your solution
Open protocols
Great artifacts for your OS and dev stack
Great management and lifecycle features
Great end user experience
OPEN PROTOCOLS
GREAT LIBRARIES
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. What if you could have it all?
Microsoft Build 2016
amazing service
9/20/2018 2:46 PM
any app style
any dev stack
What if you could have it all?
individuals
organizations
<SAML>
<SAML>
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. 9/20/2018 2:46 PM
Getting there
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. On premises Active Directory
Microsoft Build 2016
9/20/2018 2:46 PM
On premises Active Directory
Helping businesses with identity since 1999
Most widely used business identity system
Federation capabilities with ADFS
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. What happens when apps move to the cloud?
Microsoft Build 2016
9/20/2018 2:46 PM
What happens when apps move to the cloud?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Azure Active Directory
Microsoft Build 2016
9/20/2018 2:46 PM
Azure Active Directory
Identity Management as a Service (IDaaS) for organizations
Born as cloud directory for Office 365
OAuth2
OpenId Connect
SAML
Directory
Graph API
Projection of onprem directory, or cloud-only
Streamlined app provisioning
Open authentication and authorization standards
Easy directory querying from cloud app
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Azure Active Directory - fundamentals
Microsoft Build 2016
9/20/2018 2:46 PM
Azure Active Directory - fundamentals
Intelligent, ever-evolving security
World class scale and availability
Geo replication, disaster recovery
Supports locality/sovereign clouds
Device management, conditional access
Azure Region Location
Central US Iowa
East US Virginia
East US 2 Virginia
US Gov Iowa Iowa
US Gov Virginia Virginia
North Central US Illinois
South Central US Texas
West US California
North Europe Ireland
West Europe Netherlands
East Asia Hong Kong
Southeast Asia Singapore
Japan Saitama
Japan West Osaka
Brazil South Sao Paulo State
Australia East New South Wales
Australia Southeast Victoria
Central India Pune
South India Chennai
West India Mumbai
China East Shanghai
China North Beijing
Free tier!
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Azure AD - Works great with your solution
Microsoft Build 2016
9/20/2018 2:46 PM
Azure AD - Works great with your solution
WORKS WITH MICROSOFT API
OPEN PROTOCOLS
LIBRARIES FOR MAINSTREAM MOBILE STACKS
DEEP DEV TOOLS INTEGRATION
LIBRARIES FOR MAINSTREAM SERVER SIDE STACKS
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Demo
(VS app creation)

18. What if I need more IdPs, more control?
Microsoft Build 2016
9/20/2018 2:46 PM
What if I need more IdPs, more control?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Azure AD B2C White label authentication solution
Microsoft Build 2016
9/20/2018 2:46 PM
Azure AD B2C
White label authentication solution
Same awesome infrastructure as Azure AD
Scalable, Secure, MFA support
Open protocol integration
Local account, social providers, verification
Fully customizable UX
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. What if I want both consumer and commercial users?
Microsoft Build 2016
9/20/2018 2:46 PM
What if I want both consumer and commercial users?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Azure AD and Microsoft Account unification
You can now write apps working with both Azure AD and MSA account
One app registration portal
One endpoint and protocol conventions
One set of (new, simplified!) libraries
Improved protocol compliance
Incremental consent

22. Announcing… Microsoft Identity Library (MSAL)

23. MSAL: one library for Azure AD, MSA and B2C
Microsoft Build 2016
9/20/2018 2:46 PM
MSAL: one library for Azure AD, MSA and B2C
Incorporates learnings from ADAL
Works exclusively with Azure AD endpoint v2 and B2C
ADAL still fully supported – use it for v1 or ADFS
Not a protocol library
Greatly simplifies multi tenant development
Today: .NET, NetCore, Xamarin preview
Soon: native iOS, Android, JavaScript…
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Native apps The simplest MSAL app: MSAL takes care of
Microsoft Build 2016
9/20/2018 2:46 PM
Native apps
The simplest MSAL app:
MSAL takes care of
Showing authentication UX
Crafting and interpreting protocol messages
Caching and refreshing tokens
PublicClientApplication pca =
new PublicClientApplication(clientID);
AuthenticationResult ar =
await pca.AcquireTokenAsync(scopes);
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Demo MSAL in action – native clients Microsoft Build 2016
9/20/2018 2:46 PM
Demo
MSAL in action – native clients
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Web apps Standard OpenId Connect grants
Microsoft Build 2016
9/20/2018 2:46 PM
Web apps
Standard OpenId Connect grants
Existing OWIN libraries will work as is
Token acquisition done via MSAL
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Demo MSAL and the OWIN middleware in action – web apps
Microsoft Build 2016
9/20/2018 2:46 PM
Demo
MSAL and the OWIN middleware in action – web apps
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Microsoft Graph Single endpoint for
Accessing data
Traversing data
Accessing insights
Works with work/school and personal accounts
Discover more about Microsoft Graph at tomorrow’s breakout: #CODE

29. Demo Microsoft Graph in action Microsoft Build 2016 9/20/2018 2:46 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. What’s next?
Learn more about Microsoft identity: visit
Stay on top of news and announcements:
Follow us on twitter
Subscribe to our team blog
Get in touch with us! Write to
At //build/
Come visit us! We’re at the Identity booth in the Azure area
Check out the Microsoft B820
Get your hands dirty with the workshops and quickstarts at the Hub

31. What if you could have it all?
<SAML>
<SAML>

32. …The BEST identity system for ALL developers.
Microsoft Build 2016
9/20/2018 2:46 PM
…The BEST identity system for ALL developers.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Please Complete An Evaluation Form Your input is important!
9/20/2018
Please Complete An Evaluation Form Your input is important! or
© 2016 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

34. 9/20/2018 2:46 PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.