1. Microsoft Ignite 2015 4/16/2017 3:28 PM
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Identity and Access Management Everywhere
BRK3863
Identity and Access Management Everywhere
Adam Bresson, Sr. Product Marketing Manager @heyadam
Nasos Kladakis, Sr. Product Marketing Manager @Akladakis #AzureAD
Enterprise Mobility – Identity and Access Management

3. Empower Enterprise Mobility
Enable your users
People-centric approach
Protect your data
User
Devices
Apps
Data IT
Unify your environment

4. Empower Enterprise Mobility
Desktop Virtualization
Enable your users
Protect your data
User IT
Identity and Access Management
Information protection
Mobile device & application management

5. The current reality… On-Premises Private Cloud Managed devices
4/16/2017
The current reality…
EC2
On-Premises
Private Cloud
Managed devices
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Identity as the control plane
Build 2012
4/16/2017
Identity as the control plane
Simple connection
Self-service
Single sign on
•••••••••••
Username
Other Directories
Windows Server
Active Directory
On-premises
Cloud
SaaS
Azure
Office 365
Public
cloud
Microsoft Azure Active Directory

7. What is Azure Active Directory?
A comprehensive identity and access management cloud solution.
It combines directory services, advanced identity governance, application access management and a rich standards-based platform for developers
It is available in 3 editions: Free, Basic and Premium

8. 10x Discover all SaaS apps in use within your organization
Source: Help Net Security 2014
as many Cloud apps are in use than IT estimates
Microsoft Azure Active Directory
Cloud App Discovery
SaaS app category
Number of users
Utilization volume
Comprehensive reporting

9. Demo
Cloud App Discovery

10. Windows Server Management Marketing
4/16/2017
Your Directory on the cloud
Centrally managed identities and access.
Monitor and protect access to cloud applications.
Empower Users
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Windows Server Management Marketing
4/16/2017
Your Directory on the cloud
Centrally managed identities and access.
Monitor and protect access to cloud applications.
Empower Users
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Your Directory on the cloud
Windows Server Management Marketing
4/16/2017
Your Directory on the cloud
Cloud HR Apps
Microsoft Azure
Active Directory
Microsoft Identity Manager
HR Systems
LDAP v3
SQL (ODBC)
Web Services ( SOAP, JAVA, REST)
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Your Directory on the cloud
Windows Server Management Marketing
4/16/2017
Your Directory on the cloud
Cloud HR Apps
Connect and Sync on-premises directories with Azure.
Microsoft Azure
Active Directory
Azure Active Directory Connect
Other Directories
HR Systems
LDAP v3
SQL (ODBC)
Web Services ( SOAP, JAVA, REST)
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Your Directory on the cloud
Windows Server Management Marketing
4/16/2017
Your Directory on the cloud
Connect and Sync on-premises directories with Azure.
2400+ Preintegrated popular SaaS apps.
Microsoft Azure
Active Directory
SaaS apps
Other Directories
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Preintegrated SaaS apps in the application gallery
Build 2012
4/16/2017
Preintegrated SaaS apps in the application gallery
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. Your Directory on the cloud
Windows Server Management Marketing
4/16/2017
Your Directory on the cloud
Microsoft Azure
Other Directories
Connect and Sync on-premises directories with Azure.
2400+ Preintegrated popular SaaS apps.
SaaS apps
Web Apps
(Azure Active Directory Application Proxy)
Integrated
custom apps
Easily publish on-prem web apps via Application Proxy + Custom apps through a rich standards-based platform.
Identities and applications in one place.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. https://app1-contoso.msappproxy.net/
4/16/2017 3:28 PM
Azure Active Directory Application Proxy
Microsoft Azure
Active Directory
A connector that auto connects to the cloud service
Application Proxy
Multiple connectors can be deployed for redundancy, scale, multiple sites and different resources
Connectors are deployed usually on corpnet next to resources
Users connect to the cloud service that routs their traffic to the resources via the connectors
DMZ
Corporate Network
Connector
Connector
Resource
Resource
Resource
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Centrally managed identities and access
Windows Server Management Marketing
4/16/2017
Centrally managed identities and access
SaaS apps
Comprehensive identity and access management console.
Centralized access administration for preintegrated SaaS apps and other Cloud-based apps.
Dynamic Groups, Secure business processes with advanced access management capabilities.
IT professional
Your cloud apps ready when you are.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Monitor and protect access to enterprise apps
Windows Server Management Marketing
4/16/2017
Monitor and protect access to enterprise apps
Built-in security features.
Security reporting that tracks inconsistent access patterns, analytics and alerts.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Monitor and protect access to enterprise apps
Windows Server Management Marketing
4/16/2017
Monitor and protect access to enterprise apps
Built-in security features.
XXXXX
Security reporting that tracks inconsistent access patterns, analytics and alerts.
XXXXX
Step up to Multi-Factor authentication.
XXXXX
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Monitor and protect access to enterprise apps
Windows Server Management Marketing
4/16/2017
Monitor and protect access to enterprise apps
Built-in security features.
Security reporting that tracks inconsistent access patterns, analytics and alerts.
XXXXX
Step up to Multi-Factor authentication.
XXXXX
Access policies based on location, user and device state
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Application Access policies
User
Actions
Cloud Apps
Allow Access
Conditions
Location (IP Range)
On-premises
Device State*
User Group
Enforce MFA per user/per app
Block Access

23. Demo
Azure Active Directory administrative tasks

24. Windows Server Management Marketing
4/16/2017
Empower Users
Company branded, personalized application Access Panel :
+ Mobile Apps
Manage your account
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Windows Server Management Marketing
4/16/2017
Empower Users
Company branded, personalized application Access Panel :
+ Mobile Apps
Manage your account
Self Service Password Reset and application access requests
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Demo
End User Experience

27. Azure Active Directory 12-month investments
4/16/2017
Azure Active Directory 12-month investments
Business to Business
B2C
Privileged Identity Management
Administrative Units
Conditional Access
Azure Active Directory Join (Windows 10)
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Q&A

29. Related Content BRK3863: Identity and Access Management Everywhere
4/16/2017 3:28 PM
Related Content
BRK3863: Identity and Access Management Everywhere
BRK3851: Real Customer Stories for Azure Active Directory Premium
BRK3862: Extending On-Premises Directories to the Cloud Made Easy with Azure AD Connect
BRK3864: Enable Your On-Premises Apps for the Cloud with Microsoft Azure AD Application Proxy
BRK3865: How Microsoft Azure AD Helps Prevent, Detect and Remediate Attacks to Your Enterprise
BRK3867: Microsoft Identity Platform for Developers: Overview and Roadmap
BRK3854: How Microsoft IT Manages Identity in a Hybrid Cloud World
BRK3332: Microsoft Azure Active Directory and Windows 10: Better Together for Work or School
BRK4850: Developing Web and Cross Platform Mobile Apps with Azure Active Directory
BRK3873: Protecting Windows and Microsoft Azure AD with Privileged Access Management
BRK3857: Upgrading from FIM to Microsoft Identity Manager and Azure Active Directory
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. Please evaluate this session
4/16/2017 3:28 PM
Please evaluate this session
Your feedback is important to us!
Visit Myignite at or download and use the Ignite Mobile App with the QR code above.
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

31. 4/16/2017 3:28 PM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.