Downloaded 16 times
Uploaded byDavide Benvegnù
Secure your applications with Azure AD and Key Vault
The document discusses the role of Azure Active Directory in enterprise mobility, emphasizing identity management and access control through single sign-on and self-service capabilities. It highlights how Azure Key Vault securely manages secrets, keys, and certificates with authentication via Azure AD tokens and authorization through access control lists. Overall, it presents Azure's infrastructure for orchestrating identity and access lifecycle across various applications.
More Related Content
Similar to Secure your applications with Azure AD and Key Vault
![[Toroman/Kranjac] Red Team vs. Blue Team in Microsoft Cloud](https://cdn.slidesharecdn.com/ss_thumbnails/fs0fswrr36f3q9puu3u6-signature-d4523b3bf020616e67040d2a940ba8bf9aeab187b20da49956548f98de22ea12-poli-180606121949-thumbnail.jpg?width=640&height=640&fit=bounds)
More from Davide Benvegnù
Secure your applications with Azure AD and Key Vault
- 1. Disrupt or bedisrupted by AI.
- 8. Identity as thecore of enterprise mobility Azure Active Directory as the control plane Single sign-onSelf-service Simple connection On-premises Other directories Windows Server Active Directory SaaSAzure Public cloud CloudMicrosoft Azure Active Directory Customers Partners
- 9. Orchestrate the lifecycleof identities and access with: Apps in Azure Third- party apps & clouds Apps on- premises
- 11.
- 13.
- 15. An Azure resourceprovider that lets you SECRETS KEYS CERTIFICATES Backed by Hardware Security Modules Key Vault ≠ customer’s dedicated HSM
- 19. Subscription Resource GroupResource GroupResourceGroup Key VaultVMVMVM Storage accountStorage accountStorage account Key VaultKey Vault... Secret KeySecretSecret KeyKey Key VersionSecret VersionSecret VersionSecret Version Key VersionKey Version
- 20. Authentication isvia Azure AD tokens Authorization is via ACL on key vault
- 21.
Editor's Notes
- #6 This slide is required. Do NOT delete. This should be the first slide after your Title Slide. If you have questions, please contact your Track PM for guidance. We have also posted guidance on writing good objectives, out on the Speaker Portal (https://www.microsoftready.com). This slide should introduce the session by identifying how this information helps the attendee, partners and customers be more successful. Why is this content important? This slide should call out what’s important about the session (sort of the why should we care, why is this important and how will it help our customers/partners be successful) as well as the key takeaways/objectives associated with the session. Call out what attendees will be able to execute on using the information gained in this session. What will they be able to walk away from this session and execute on with their customers. Good Objectives should be SMART (specific, measurable, achievable, realistic, time-bound). Focus on the key takeaways and why this information is important to the attendee, our partners and our customers. Each session has objectives defined and published on www.microsoftready.com, please work with your Track PM to call these out here in the slide deck. If you have questions, please contact your Track PM.
- #9 Microsoft has a solution for this [Click] Traditional identity and access management solutions providing sing-sign on to on-premises applications and directory services such as Active Directory and others are used from the vast majority of organizations and huge investments were made to deploy and maintain them. These solutions are perfect for the on-premises world. [Click] Now, as we have discussed, there are new pressing requirements to provide the same experience to cloud applications hosted in any public cloud. [Click] Azure Active Directory can be the solution to this new challenge by extending the reach of on-premises identities to the cloud in a secure and efficient way. [Click] In order to do that, one simple connection is needed from on-premises directories to Azure AD. [Click] and everything else will be handled by Azure AD. Secure single sign-on to thousands of SaaS applications hosted in any cloud by using the same credentials that exist on-premises [Click] And we don’t forget the users. Azure AD provides Self-service capabilities and easy access to all the application, consumer or business, they need. in the cloud but on-premises too (Application Proxy)