To use Azure for a corporate application, what are the areas you need to think about?“The Pillars of Concern”AuthenticationAuthorizationData SynchronizationSecurity of DataApplication IntegrationOperations / ManagementReduce the cost/effort to move to Azure

Authentication

Authorization

Data Synchronization

Security of Data

Application Integration

Operations / Management

Microsoft Azure DatacenterDemo InfrastructureOrgchart AppDatabaseUserAccenture DatacenterLookup AppDatabase“Geneva” ServerAD

Show the Demo!

What did we see?Authentication – “Geneva” server against corporate AD on an internally hosted serverAuthorization – “Geneva” server created a custom claim that only contained the data elements required for the application to make the authorization decisionData Sync – An SSIS package was used to pull data rows and columns using a view from the internal data table and load to the SQL Azure instanceApplication Integration – use of “Geneva” server allowed Web SSO model between apps in different locations using different techniques

Authentication – “Geneva” server against corporate AD on an internally hosted server

Authorization – “Geneva” server created a custom claim that only contained the data elements required for the application to make the authorization decision

Data Sync – An SSIS package was used to pull data rows and columns using a view from the internal data table and load to the SQL Azure instance

Application Integration – use of “Geneva” server allowed Web SSO model between apps in different locations using different techniques

Where are the gaps?Security of Data – each organization will need to understand how the data is secured in SQL Azure and how to comply with any applicable laws/policies.Operations/Management – today we cannot use our standard model for creating events in the Windows Event Log and then capturing those with SCOM. We are looking at whether we could build a .NET Services layer to handle it.IT Audit – you will need to understand what requirements your internal/external IT audit teams have

Security of Data – each organization will need to understand how the data is secured in SQL Azure and how to comply with any applicable laws/policies.

Operations/Management – today we cannot use our standard model for creating events in the Windows Event Log and then capturing those with SCOM. We are looking at whether we could build a .NET Services layer to handle it.

IT Audit – you will need to understand what requirements your internal/external IT audit teams have

What did it take to build?Started with .NET 2.0 web site app – conversion to .NET 3.5 SP1 web app was simpleBlog post on how to add geneva claims handling to an appGeneva server already existed for other apps – defined new relying party and claims to be transmittedUsed SQL Azure Migration Wizardto create SQL Database objects on SQL AzureCreated view on internal SQL data and used SSIS to move it to SQL AzureOverall, the initial version of this took about 40 hours of effort from both of us and it has been modified only slightly since then (another 10 hours of effort).

Started with .NET 2.0 web site app – conversion to .NET 3.5 SP1 web app was simple

Blog post on how to add geneva claims handling to an app

Geneva server already existed for other apps – defined new relying party and claims to be transmitted

Used SQL Azure Migration Wizardto create SQL Database objects on SQL Azure

Created view on internal SQL data and used SSIS to move it to SQL Azure

Why is this so cool?You are leveraging the development and ITPro skills that you already have (VS, SSIS)You can get running very quickly without new infrastructure (assuming you already have “Geneva”)You do not have to worry about the plumbing, you just have to build the applicationMicrosoft is providing the tooling and guidance to reduce the barrier to leveraging Azure

You are leveraging the development and ITPro skills that you already have (VS, SSIS)

You can get running very quickly without new infrastructure (assuming you already have “Geneva”)

You do not have to worry about the plumbing, you just have to build the application

Microsoft is providing the tooling and guidance to reduce the barrier to leveraging Azure

Q & A