1. Identity & Access Control in the Cloud Sachin Vinod Rathi Architect Advisor, Microsoft Corporation Niraj Bhatt Enterprise Architect, Windows Azure MVP

2. Identity Crisis Typical enterprise has dozens of providers – AD, SunOne, SQL, SAP, Oracle... Need to consolidate these, and federate where consolidation isn’t possible Goal: single enterprise identity service

3. Identity Capabilities FederationAuthenticationAuthorizationAuditProvisioningRemovalSelf Service

4. Federation UK Immigration Trusts US Passport Office

5. Claims Will Get the Job Done

7. On-Premises Applications

8. Demo

9. Managing Access for a Windows Azure Application

10. Name : Niraj Role : Architect Name : Niraj Role : Architect

11. Managing Access for a Windows Azure Application Name : Sachin Role : Architect Name : Sachin Role : Architect.NET Framework Extension Programming model for claims Visual Studio Tools & Templates Windows Server Role An STS for AD WS-Federation, WS-Trust, SAML

12. Basic Use of WIF & STS Demo

13. Authenticating Users from Business Partners Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Home Realm Discovery

14. Authenticating Users from Business Partners Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Home Realm Discovery Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Home Realm Discovery Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Hosts an STS in the Cloud Handles relationship with Business Partners & Social Providers WS-Federation, WS-Trust, OpenID, OAuth

15. Handling Relationships, HRD and Token Normalization Demo

16. Authenticating Users from Web and Social Providers HRD 1.FaceBook 2.Live 3.Yahoo 4.Google HRD 1.FaceBook 2.Live 3.Yahoo 4.Google Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect

17. FabrikamShipping: Automating Customer SignUp from Social Providers Demo

18. Authenticating Mobile Users Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect Nam e : Sachi n Role : Archi tect

19. Reusing Existing Identities in Mobile Applications Demo

20. Claims Will Get the Job Done

22. Resources

24. © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.