SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?
0 likes1,426 views
The document presents an overview of identity management in Office 365, discussing terminology such as authentication, authorization, and single sign-on (SSO) among various identity providers. It explains the use of standards like SAML, WS-Federation, and WS-Trust for identity synchronization and federation while offering guidance for organizations in choosing their identity management models. Additionally, it outlines the benefits of third-party identity providers and provides resources for implementing SSO and managing user accounts effectively.
SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?
- 1. Office 365 and Cloud Identity What does it mean to me? Scott Hoag Senior Systems Engineer, AIS Gold Sponsors Silver Sponsors Bronze Sponsors
- 3. Agenda Identity Management in Office 365 Identity Scenarios Synchronisation Demo Add-ons and More to Think About 1 2 3 4
- 6. Terminology Authentication Authorization Verifying that a user, device, or service such as an application provided on a network server is the entity that it claims to be. Determining which actions an authenticated entity is authorized to perform on the network
- 7. Terminology Single Sign On (SSO) is the ability for two disjoint Identity Providers (IDP) to trust each other such that a user logged in to one does not need to log in again for the second Relying Party (RP) is the system that relies on the IDP to authenticate a user Security Assertion Markup Language (SAML) SAML is a public standard managed by OASIS. SAML is the identity token and also the protocol. WS-Federation (WSFED) / WS-Trust WSFED is used for web browser-based authentication with an IDP. WS-Trust is used by Office client apps to authenticate.*
- 8. Identity Synchronisation and Federation WS-Federation WS-Trust SAML 2.0 Metadata Shibboleth Graph API
- 9. Microsoft Identity Services Microsoft Account Azure Active Directory Microsoft Account Ex: [email protected] User Organizational Account Ex: [email protected] User
- 13. Choosing a Model
- 14. Choosing a Model
- 15. Choosing a Model SSO is required Multiple Forests CAC or on-premises MFA Business requires it
- 16. Choosing a Model
- 18. The Setup
- 19. Prepare and Download DirSync
- 20. Install DirSync
- 24. Azure AD Sync Services http://go.microsoft.com/?linkid=9845645 http://go.microsoft.com/fwlink/?LinkID=270179
- 25. Office Client Passive Authentication SAML 2.0
- 26. Works with Office 365 – Identity program Qualification of third party identity providers for federation with Office 365. Microsoft supports Office 365 only when qualified third party identity providers are used. Published Qualification Requirements Published Technical Integration Docs Automated Testing Tool Self Testing work by Partner Predictable and Shorter Qualification http://aka.ms/ssoproviders Customer Benefits *For representative purposes only. WS-Trust & WS-Federation Active Directory with ADFS SAML (passive auth) • Flexibility to reuse existing identity provider investments • Confidence that the solution is qualified by Microsoft • Coordinated support between the partner and Microsoft
- 27. Office 365 Federation Options Suitable for medium, large enterprises including educational organizations Suitable for medium, large enterprises including educational organizations Suitable for educational organizations For organizations that need to use SAML 2.0
- 28. Closing Thoughts
- 29. The end to end Microsoft Stack WS-Federation WS-Trust
- 30. Agenda Identity Management in Office 365 Identity Scenarios Synchronisation Demo Add-ons and More to Think About
- 32. Resources Use third-party identity providers to implement single sign-on Deployment scenarios for Office 365 with single sign-on and Azure Choosing a sign-in model for Office 365 Password hash sync simplifies user management for Office 365 Using Alternate Login IDs with Azure Active Directory Office 365 SAML 2.0 Federation Implementer’s Guide Simplified login to Yammer from Office 365 Multi-Factor Authentication for Office 365 Office 365 User Account Management
- 33. Thanks for listening Remember to submit your feedback so you go in the draw to win prizes at the end of the day Gold Sponsors Silver Sponsors Bronze Sponsors