1. patterns & practices Symposium 2013 Windows Azure Active Directory Vittorio Bertocci vittorib@Microsoft.com @vibronet

2. directories offer the best model for business applications

3. traditional directories don’t work too well with cloud workloads

4. One Cloud Directory for Every Organization

5. Cloud Apps and Users from Organizations Apps you buyYour LoB AppsApps you sell Your Customers’ Directories Your Directory

6. Symposium 2013 Agenda  The Directory Pattern  Directory in Action: Windows Azure for Organizations  Your Directory and Line of Business Apps in the Cloud  Your Customer’s Directory and your SaaS Apps in the Cloud

7. Symposium 2013 Directories

8. The Directory Approach Direct Reports MemberOf Asset

9. App Contoso’s On-Premises Directory Anatomy of Windows Azure Active Directory Management Portal Graph API OAuth2 SAML-P WS-Federation Metadata Contoso’s WA AD Tenant Windows Azure Active Directory Dir Sync

10. Symposium 2013 Directory in Action: Windows Azure for Organizations

11. Symposium 2013 DEMO  Accessing the Windows Azure Portal With an Organizational Identity

12. Symposium 2013 Advantages of Using Organizational Identities  Centrally managed provisioning and deprovisioning  Enforceable credential policies  Multiple authentication factor  Better User Experience  Less credentials to remember

13. Symposium 2013 Your Directory and Your LoB Applications in the Cloud

14.  Using the ASP.NET tools to connect to Windows Azure AD DEMO

15. Windows Azure Active Directory OAuth2 SAML-P WS-Federation Metadata Graph API Connecting your LoB App to Windows Azure AD Your LoB App Contoso’s WA AD Tenant

16. Symposium 2013 The Graph API RESTful Interface to Windows Azure Active Directory  Compatible with OData V3  Uses OAuth 2.0 for Authentication and Role Based Assignment for Application and Users, for Authorization Programmatic access to Windows Azure Active Directory  Objects such as Users, Groups, Contacts, Tenant Information, Licensing, Roles  Support Links such as Member, memberOf, Manager, DirectReport  Differential queries Requests use standard HTTP methods  GET, POST, PATCH, DELETE to create, read, update, and delete directory objects.  Response support XML and JSON, and standard HTTP status codes

17. Symposium 2013 Your Customer’s Directory & Your SaaS Apps in the Cloud

18.  Seamless Consent for SaaS Apps DEMO

19. The Application Publishing Flow Visual Studio Modify your app to - admit multiple tenants - handle consent messages Seller Dashboard Register your app in the Seller Hub - create keys, catalog entries… - paste keys back in the app code App Windows Azure AD Portal

20.  The SaaS Application Publishing Cycle DEMO

21. Graph API OAuth2 SAML-P WS-Federation Metadata Management Portal Multi-tenancy and Consent Flow Your SaaS App Contoso’s WA AD Tenant ServicePrincipal Fabrikam’s WA AD Tenant

22. Symposium 2013 Resources  Get your free tenant at http://g.microsoftonline.com/0AX00en/5 http://g.microsoftonline.com/0AX00en/5  Download the samples and tutorials at https://activedirectory.windowsazure.com/develop/ https://activedirectory.windowsazure.com/develop/  Give us feedback at http://social.msdn.microsoft.com/Forums/en- US/WindowsAzureAD/ http://social.msdn.microsoft.com/Forums/en- US/WindowsAzureAD/

23. One Cloud Directory for Every Organization

24. Symposium 2013 Thanks!  vittorib@microsoft.com vittorib@microsoft.com  @vibronet  http://blogs.msdn.com/vbertocci http://blogs.msdn.com/vbertocci