Windows Azure Active Directory: Identity Management in the Cloud
-
Upload
chris-dufour -
Category
Technology
-
view
1.796 -
download
3
description
Transcript of Windows Azure Active Directory: Identity Management in the Cloud
![Page 1: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/1.jpg)
Windows Azure Active Directory: Identity Management in the cloud
Chris Dufour, ASP .NET MVP
Software Architect, Compuware
Follow me @chrduf
http://www.linkedin.com/in/cdufour
NET349
![Page 2: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/2.jpg)
Agenda
• What is Active Directory (AD) • What’s the problem?• What is Windows Azure Active Directory?• Create and Publish an Application to the Cloud
![Page 3: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/3.jpg)
What is Active Directory (AD)
• Directory system created by Microsoft in 1999• Provides a central location for network administration and
security• Makes use of Lightweight Directory Access Protocol (LDAP)
versions 2 and 3, Kerberos and DNS• Most popular directory system in use by organizations
![Page 4: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/4.jpg)
Problem
Cloudapp
Cloudapp
Cloudapp
AD
While enterprises working to consolidate identity system on-premises, cloud apps are fragmenting identity… again
Separate username/password sign-in Manual or semi-automated provisioning
No direct connection to directory
![Page 5: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/5.jpg)
Anatomy of a Typical Cloud Application
Clients using wide variety of devices/languages/platforms
Browser
Mobile App
Server App
Web Application
Account and profile
store
Web Service API
Server applications using wide variety of platforms/languages
![Page 6: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/6.jpg)
What is Windows Azure Active Directory?
• Service that provides identity and access capabilities for on-premises and cloud applications
• Extension of Active Directory into the cloud• Built concurrently with Office 365• Provides integration of applications with Azure AD to
provide single sign-on• Designed primarily to meet the needs of cloud applications
![Page 7: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/7.jpg)
Released to production April 8, 2013
• Processed over 265 Billion authentications since 2010• 2.9 million businesses, government bodies and schools are
already enjoying the benefits of Windows Azure Active Directory, using it to manage access to Office365, Dynamics CRM online, Windows Intune and Windows Azure
• Over the last 90 days, Windows Azure AD has processed over 65 billion authentication requests while maintaining 99.97% or better monthly availability.
Source: http://bit.ly/13UZ1mS
![Page 8: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/8.jpg)
Identity Management as a Service
• Consolidate identity management across cloud apps
• Connect to directory from any platform, any device
• Connect with people from web identity providers and other organizations
![Page 9: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/9.jpg)
Design Principles
• Maximize device and platform reach http/web/REST based protocols
• Multi-tenancy Customer owns directory, not Microsoft
• Optimize for availability, consistent performance and scale Keep it simple
![Page 10: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/10.jpg)
Identity Types
Cloud Identity• Separate credential from
corporate credential• Authentication occurs via
cloud service• Password policy stored in
the cloud
Federated Identity• Same credential as
corporate credential• Authentication occurs via
on-premises ADFS• Password policy stored on-
premises• Requires directory
synchronization
![Page 11: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/11.jpg)
Relationship to Windows Server AD
• On-premises and cloud Active Directory managed as one
• Directory information synchronized to cloud, made available to cloud apps via roles-based access control
• Federated authentication enables single sign on to cloud applications
![Page 12: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/12.jpg)
Anatomy of Windows Azure Active Directory
Graph API
OAuth2
SAML-P
WS-Federation
Metadata
Fabricam Tenant
Windows Azure Active DirectoryCloudapp
Dir
Sync
Compuware Tenant
Cloudapp
AD
EastTorontoUG Tenant
![Page 13: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/13.jpg)
Directory Graph API
• RESTful programmatic access to directory Objects such as users, groups, roles, licenses Relationships such as member, memberOf, manager, directReport
• Requests use standard HTTP methods POST, GET, PATCH, DELETE to create, read, update, and delete Response in XML or JSON; standard HTTP status codes Compatible with OData 3.0
• OAuth 2.0 for authentication Role-based assignment for application and user authorization
![Page 14: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/14.jpg)
Create an Application For Your Organization
1. Get developer prerequisites for Windows Azure AD Visual Studio 2012 Web Tools Extensions for Visual Studio 2012 Microsoft ASP.NET Tools for Windows Azure Active Directory – Visual
Studio 2012
2. Get a Windows Azure AD tenant to test your app
3. Integrate your app with Windows Azure AD
4. Test your application
5. Publish your application to Azure Websites (optional)
![Page 15: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/15.jpg)
DemoCreate and Publish an Application to the Cloud
![Page 16: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/16.jpg)
Next Steps
• Get a Windows Azure Active Directory tenant• Integrate your application with Windows Azure Active
Directory• Publish your application to Azure Websites
![Page 17: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/17.jpg)
Resources
• Free Windows Azure Active Directory Tenanthttp://bit.ly/18mpaOZ
• Sign in to Windows Azure Active Directoryhttp://bit.ly/1aq3rCn
• Graph Explorerhttp://bit.ly/11XJnt2
• Windows Azurehttp://bit.ly/19gEMT9
• Manage Windows Azure Active Directory by using Windows PowerShellhttp://bit.ly/10B8Mm1
![Page 18: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/18.jpg)
Resources
• Visual Studio Express 2012http://bit.ly/16ZC9Wx
• Web Tools Extensions for Visual Studio 2012http://bit.ly/ZoefBA
• Web Tools Extensions for Visual Studio Express 2012http://bit.ly/12YaxwS
• Microsoft ASP.NET Tools for Windows Azure Active Directory – Visual Studio 2012 http://bit.ly/14Wzh9k
• Microsoft ASP.NET Tools for Windows Azure Active Directory – Visual Studio Express 2012 for Web http://bit.ly/16keQr7
![Page 19: Windows Azure Active Directory: Identity Management in the Cloud](https://reader034.fdocuments.in/reader034/viewer/2022051210/54b87a7d4a7959547a8b45a5/html5/thumbnails/19.jpg)
Thank You
Please fill out an evaluation for this talk
Windows Azure Active Directory: Identity Management in the cloud - NET349