Office 365 brings a host of productivity options, but one of the most overlooked components is how we'll authenticate to The Cloud™. With Microsoft Azure Active Directory driving access and authentication to our Office 365 tenants, it is important to understand how we can interact with it. Join us as we explore Cloud Identity, identity federation, directory synchronisation, and most importantly Azure and its impacts on user experience and access Office 365. Throughout this session, we'll answer the questions that impact you and how your decisions around identity shape your Office 365 experience.

1. Office 365 and Cloud Identity
What does it mean to me?
Scott Hoag
Senior Systems Engineer, AIS
Gold Sponsors Silver Sponsors Bronze Sponsors

3. Agenda
Identity Management in Office 365
Identity Scenarios
Synchronisation Demo
Add-ons and More to Think About
1
2
3
4

4. Identity Management Overview

5. Terminology
https://en.wikipedia.org/wiki/Identity_management

6. Terminology
Authentication Authorization
Verifying that a user, device, or
service such as an application
provided on a network server is
the entity that it claims to be.
Determining which actions an
authenticated entity is authorized
to perform on the network

7. Terminology
 Single Sign On (SSO) is the ability for two disjoint Identity
Providers (IDP) to trust each other such that a user logged in to
one does not need to log in again for the second
 Relying Party (RP) is the system that relies on the IDP to
authenticate a user
Security Assertion Markup
Language (SAML)
SAML is a public standard managed by OASIS.
SAML is the identity token and also the
protocol.
WS-Federation (WSFED) / WS-Trust
WSFED is used for web browser-based
authentication with an IDP. WS-Trust is used by
Office client apps to authenticate.*

8. Identity Synchronisation and Federation
WS-Federation
WS-Trust
SAML 2.0
Metadata
Shibboleth
Graph API

9. Microsoft Identity Services
Microsoft Account Azure Active Directory
Microsoft Account
Ex: alice@outlook.com
User
Organizational Account
Ex: alice@contoso.com
User

10. Azure Active Directory

11. Identity Scenarios

13. Choosing a Model

14. Choosing a Model

15. Choosing a Model
 SSO is required
 Multiple Forests
 CAC or on-premises
MFA
 Business requires it

16. Choosing a Model

17. Directory Sync Demonstration

18. The Setup

19. Prepare and Download DirSync

20. Install DirSync

21. Configure DirSync

22. Other Considerations

23. Alternate Login ID

24. Azure AD Sync Services
http://go.microsoft.com/?linkid=9845645
http://go.microsoft.com/fwlink/?LinkID=270179

25. Office Client Passive Authentication
SAML 2.0

26. Works with Office 365 – Identity program
 Qualification of third party identity providers
for federation with Office 365. Microsoft
supports Office 365 only when qualified
third party identity providers are used.
 Published Qualification Requirements
 Published Technical Integration Docs
 Automated Testing Tool
 Self Testing work by Partner
 Predictable and Shorter Qualification
 http://aka.ms/ssoproviders
Customer
Benefits
*For representative purposes
only.
WS-Trust & WS-Federation
Active Directory with ADFS
SAML (passive
auth)
• Flexibility to reuse
existing identity
provider investments
• Confidence that the
solution is qualified by
Microsoft
• Coordinated support
between the partner
and Microsoft

27. Office 365 Federation Options
Suitable for medium,
large enterprises including
educational organizations
Suitable for medium,
large enterprises including
educational organizations
Suitable for educational
organizations
For organizations that
need to use SAML 2.0

28. Closing Thoughts

29. The end to end Microsoft Stack
WS-Federation
WS-Trust

30. Agenda
Identity Management in Office 365
Identity Scenarios
Synchronisation Demo
Add-ons and More to Think About





32. Resources
Use third-party identity
providers to implement single
sign-on
Deployment scenarios for
Office 365 with single sign-on
and Azure
Choosing a sign-in model for
Office 365
Password hash sync simplifies
user management for Office
365
Using Alternate Login IDs with
Azure Active Directory
Office 365 SAML 2.0
Federation Implementer’s
Guide
Simplified login to Yammer
from Office 365
Multi-Factor Authentication for
Office 365
Office 365 User Account
Management

33. Thanks for listening
Remember to submit your feedback so you go in the draw to win prizes at
the end of the day
Gold Sponsors Silver Sponsors Bronze Sponsors