1. Jan Ketil Skanke og Olav Tvedt
@olavtwitt olavtvedt.blogspot.com
@janke75 jankesblog.com

2. The current reality…

3. Self-service Single
sign on
•••••••••••
Username
Identity as the control plane
Simple
connection
Cloud
SaaS
Azure
Office 365Public
cloud
Other
Directories
Windows Server
Active Directory
On-premises Microsoft Azure Active Directory

4. What is Azure Active Directory?
A comprehensive identity and access
management cloud solution for your
employees , partners and customers.
It combines directory services,
advanced identity governance,
application access management and
a rich standards-based platform for
developers.

6. SaaS appsMicrosoft Azure
Active DirectoryOther Directories

7. Azure AD Join makes it possible to connect
work-owned Windows 10 devices to your
company’s Azure Active Directory.
Users can sign into Windows with their cloud-
hosted work credentials and enjoy modern
Windows experiences.
 Enterprise-compliant services
 SSO from the desktop to cloud and on-
premises applications with no VPN
 MDM auto enrollment
 Support for hybrid environments
Azure AD Join for Windows 10
Windows 10 Azure AD
Joined Devices
MDM
Auto-enrolment

8. Demo – Jan Ketil Skanke
 Azure AD Join for Windows 10

9. A stand-alone Azure Identity and Access
management service also included in
Azure Active Directory Premium
Prevents unauthorized access to both on-
premises and cloud applications by
providing an additional level of
authentication
Trusted by thousands of enterprises to
authenticate employee, customer, and
partner access.
What is Azure Multi-Factor Authentication?

10. How it works

11. http://myapps.microsoft.com

12. http://myapps.microsoft.com

13. Demo – Olav Tvedt
Myapps
Register for Password Reset
Self-service password reset with on-premises write-back
Self-service group management for cloud users
Advanced anomaly security reports
Multi-Factor Authentication service for cloud users (Azure Authenticator
App)

14. Demo – Jan Ketil Skanke
Compare Experience on Windows 10 AAD Joined and OnPrem AD Join

15. No Object Limit No Object Limit
No Limit
Advanced Security
Reports
Yes
Premium+
Basic
Features
Group-based access management/provisioning Yes Yes
Self-Service Password Reset for cloud users Yes Yes
Company Branding (Logon Pages/Access Panel customization) Yes Yes
Application Proxy Yes Yes
SLA Yes Yes
Yes
Yes
Yes
Yes
Yes

16. Resources:
http://www.microsoft.com/en-us/server-cloud/products/azure-active-directory/