1. OSP324

2. Active Directory

4. User directory synchronization User single-sign on Client distribution Availability monitoring User directory synchronization User single-sign on Client distribution Availability monitoring

5. Microsoft Cloud Productivity Tools Office 365: Directory Synchronization, Monitoring Microsoft IT Tools Windows Intune: Client software 3rd-party clouds Salesforce.com: Single Sign-On

8. demo

10. Microsoft Confidential

15. 15 | Microsoft Confidential

16. 16 | Microsoft Confidential admin@mikek.me  mikek.local\Administrator 

17. 17 | Microsoft Confidential

20. demo

21. Microsoft Cloud Productivity Tools Office 365: Directory Synchronization, Monitoring Microsoft IT Tools Windows Intune: Client software 3rd-party clouds Salesforce.com: Single Sign-On

23. The installation package includes a private certificate that is specific to the Windows Intune account

26. demo

27. Microsoft Cloud Productivity Tools Office 365: Directory Synchronization, Monitoring Microsoft IT Tools Windows Intune: Client software 3rd-party clouds Salesforce.com: Single Sign-On

30. ADFSGoogleSalesforce.com End pointSign-in page URLIdentity Provider Login URL Token signing certificateIdentity Provider CertificateVerification certificate Relying party EndPointDomain Specific IssuerEntity Id

31. Browser Identity ProviderService Provider GET /something HTTP/1.1 302 Found Location: http://idp.ex.com/saml?SAMLrequest=hf7893b…&RelayState =HKFDhh383 GET http://idp.ex.com/saml?SAMLrequest=hf7893b…&Rela yState=HKFDhh383 200 OK SAML Assertion in HTML FORM POST /acs SAML Assertion HTTP/1.1 302 Found Location: http://sp.ex.net/something Set-Cookie: token=value; Domain=.ex.net Authenticate

35. BrowserIdentity ProviderService Provider GET /something HTTP/1.1 302 Found Location: https://idp.ex.com/saml?... GET https://idp.ex.com/saml?... 200 OK SAML Assertion in HTML FORM POST /acs SAML Assertion HTTP/1.1 302 Found Location: https://sp.ex.net/something Set-Cookie: token=value; Domain=.ex.net WWW-Authenticate: Negotiate Authorization: Negotiate a874… WWW-Authenticate: Negotiate he83… Authorization: Negotiate k83g…

37. demo

38. Active Directory User directory synchronization User single-sign on Client distribution Availability monitoring User directory synchronization User single-sign on Client distribution Availability monitoring

39. Resources www.microsoft.com/teched Sessions On-Demand & CommunityMicrosoft Certification & Training Resources Resources for IT ProfessionalsResources for Developers www.microsoft.com/learning http://microsoft.com/technet http://microsoft.com/msdn http://northamerica.msteched.com Connect. Share. Discuss.

41. Scan the Tag to evaluate this session now on myTechEd Mobile