Slidedeck from first #BrightTalk session. Covering Azure AD Identity Protection and AIP, and how it can be used in a way that does not irritate the users unnecessarily

1. Adding security layers while keeping the users happy
Securing the weakest link:

2. Olav Alexander
Who Are We:
Pål

3. The User Complexity
Challenge - Generations
▪ The Lost Generation
▪ The G.I. Generation
▪ The Silent Generation
▪ The Baby Boomers
▪ Generation X
▪ Generation Y (Millennials)
▪ Generation Z
© Innofactor Plc 2018

4. Categories of users - Levels
▪ Skilled
▪ ..
▪ Average
▪ ..
▪ Technology Challenged
© Innofactor Plc 2018 | Confidential | Page 5

5. Force?

6. Azure AD Identity Protection

7. Azure AD Identity Protection
http://cloud-platform-assets.azurewebsites.net/intelligent-security-graph/

8. AAD detects six types of risk events (Currently):
▪ Users with leaked credentials
▪ Sign-ins from anonymous IP addresses
▪ Impossible travel to atypical locations
▪ Sign-ins from infected devices
▪ Sign-ins from IP addresses with suspicious activity
▪ Sign-ins from unfamiliar locations
© Innofactor Plc 2018 | Confidential | Page 13

9. SHOW & TELL
Azure AD Identity Protection Console

10. Multifactor Authentication

11. Multifactor Authentication

12. Conditional Access

13. How Does It Work?

14. IF
Privileged user?
Credentials found in
public?
Accessing sensitive app?
Unmanaged device?
Malware detected?
IP detected in Botnet?
Impossible travel?
Anonymous client?
High
Medium
Low
User risk
10+
TBper day
THEN
Require MFA
Allow access
Deny access
Force password reset******
Limit access
High
Medium
Low
Session risk
Azure
Bing
OneDrive
Microsoft
Cyber Defense
Operations Center
Microsoft
Cybercrime Center
Xbox Live
Microsoft
Accounts
Skype
Risk-based
conditional access

15. DEMOS:
Risk Based settings
User Experience

16. Information Protection

17. (Are you confused yet?)
MIP, AIP, Office 365 Security and Compliance portal.

18. Office 365
Security
&
Compliance Center

19. Azure Portal:
Azure
Information
protection

20. Protection on by default

21. Office Message Encryption
on by default
For any new Office E3 or above subscription.

22. Richer collaboration
We can now include non-AAD domains in the
template definition which would specifically
assist in cross-company or non-AAD
collaboration scenarios of Office 365 Message
Encryption.

23. New policy – Encrypt-Only

24. DEMO:
AIP
Azure Portal configuration
User Experience

25. “We cannot solve our
problems with the same
thinking we used when
we created them”
- Albert Einstein

26. Blog: olavtvedt.blogspot.com Blog: Solaat.no
Principal Cloud Solution Architect
MVP – Cloud and Datacenter
Twitter: OlavTwitt
Olav Tvedt Alexander S. Rødland
Senior Consultant
MVP – Windows and Devices
Twitter: alexsolaat
Who Are We:
Blog: pewinther.blogspot.com
Principal Cloud Solution Architect
Twitter: pewinther
Pål Winther