Downloaded 16 times
More Related Content
Similar to Azure Saturday: External Collaboration With Azure AD B2B
![Computer Networks 01[1 using all terms].pptx](https://cdn.slidesharecdn.com/ss_thumbnails/computernetworks011-251214040533-327dd9f8-thumbnail.jpg?width=640&height=640&fit=bounds)
Azure Saturday: External Collaboration With Azure AD B2B
- 1. External collaboration withAzure B2B #AzureSaturday Speaker: Sjoukje Zaal 18.05.2019 – Microsoft Munich – azuresaturday.de – @azuresaturday
- 2. About Me Sjoukje Zaal PrincipalExpert Microsoft / Azure MVP T: @SjoukjeZaal W: https://www.sjoukjezaal.com
- 3. Agenda What is AzureB2B? Why Azure B2B? Key Benefits and Capabilities Demos! Azure B2B & Office 365 More Demos!
- 4. What is AzureActive Directory B2B? Azure Active Directory Business-to-Business (B2B) enables any organization to work safely and securely with users from any other organization.
- 5. Why use AzureActive Directory B2B? -Gives Access to: • Azure & Office 365 resources • Custom Applications • Third Party Applications • Documents & data
- 6. Key Benefits • Workswith any user • Azure AD not required • Users can use their own identities • No external directories • Simple & Secure • Easy for admins and users • Access to any app and data • Enterprise-grade security for apps and data • No external account management
- 7. Capabilities • Invite guestusers by email • Conditional Access Policies • Sharing Policies • Azure AD Identity Protection • Auditing and Reporting • Customize onboarding using PowerShell & Invitation APIs • Licensing: 1:5 ratio
- 8. Flow of AddingGuest Users Admin adds guest user to Azure AD Guest user receives an invitation email Guest user clicks link in the invitation Guest user logs in with own account Guest user accepts the privacy statement Guest user is redirected to the App landing page
- 9.
- 10. Demo Summary • Add Guestuser with a personal Microsoft account to Azure AD • Add Guest user to a group • Add group to an application
- 11. Invitation Email • Companybranding / information • Subject • Personal Message • Redemption URL
- 12.
- 13. Demo Summary • Userreceives invitation • User accepts the invitation • User logs in using own credentials • User accepts the privacy terms • User can access the applications
- 14. Add Guest UsersWithout Invitation Guest Invitor Directory Role Sending out a direct link
- 15. APIs & PowerShell B2B collaboration invitation APIs PowerShellfor bulk invitations
- 16. Invitation Customization • WithPowerShell / API Invitations you can: • Customize email messages • Add a display name for the user • Add CCs to the messages • Suppress invitation email messages altogether • Set the invitation redirect URL
- 17.
- 19. Demo Summary • Downloadthe latest Azure Active Directory PowerShell for Graph • https://www.powershellgallery.com/packages/ AzureADPreview/2.0.1.18 • Create a CSV file with email addresses • Create accounts with PowerShell
- 20. Conditional Access • PremiumAzure AD • At Tenant, app or user level • Same policies as internal users • Easy to set policies for guest users (Preview)
- 21.
- 22. Demo Summary • Createa new Conditional Access Policy • Select “All Guest Users” • Enable MFA for guest users • Logged in as a guest user • Used MFA to access the application
- 23. Microsoft provides sample code fora Self- Service Portal on GitHub.
- 24. Azure B2B SelfService Portal • MVC sample application • Uses the Graph API • Approve / deny guest users • Custom email templates • Custom redirect URL
- 25.
- 26. Demo Summary • Adda guest user using Self Service Portal • Approve or deny guest user • Create custom email templates • Set a different redirect URL
- 27. External Sharing in Office365 VS Azure B2B • Office 365 uses Azure B2B • Except for SharePoint Online & OneDrive • Different Invitations • Different Licensing
- 28. Enable Azure B2B in SPOnline & OneDrive
- 29. Differences Invitation Redemptionin Azure B2B & Office 365 B2B users can be selected before accepting the invite Office 365 users can be selected after accepting the invite
- 30. Adding guest users usingPowerApps, Flow and the Graph API in SharePoint Online Demo
- 31. Solution Components PowerApp Flow AzureAD App Graph API
- 32. Demo Summary • Create anAzure AD Application • Setting the Application Permissions • Create a Flow • Call the Azure AD App from Flow • Use the MS Graph to add guest users • Create a PowerApp for sign-up form • Use the PowerApp in SharePoint Online • Detailed blog post: https://www.sjoukjezaal.com/azure-b2b- sharepoint-online-solution-using-powerapps-flow- and-the-graph-api/
- 33. Current Limitations • Possibledouble multi-factor authentication • Azure AD Directory Limits • Replication Latency
- 34.