Azure Identity and access management

Concept of identity and how identity is used in public cloud (Azure). Various features provided by Azure AD

1. Identity and Access Management Dinusha Kumarasiri

2. Agenda Identity Identity Management in On-premises Azure AD Azure AD Features Scopes Role Based Access Control Identity Collaboration

3. Identity Information that represent an agent (user / group) Identity is used to authenticate against an identity provider Used to access resources authorized for that identity Identity Provider Resource Trusts

4. Identity management on-premises Active Directory Domain Services Custom Protocols might not be compatible with cloud services Kerberos NTLM LDAP

5. Azure Active Directory Cloud based identity and access management service Works as an identity provider Can import on-premises identities to cloud Azure AD On-premises ADDS AAD Connect

6. AAD Features : Authentication Self-service password reset Multi-Factor Authentication

7. AAD Features : Application Management How do we connect with external applications? How can we avoid using different credentials for each application? App1 App2

8. AAD Features : Identity Protection Automate detection and remediation of identity based risks Investigate risks Integrate with other platforms Leaked Credentials Malware Linked IP Addresses Unfamiliar S ign-In P roperties Require MFA Self-Service Password Reset Block User Risks Remediation Risk Levels Review Detections - Reports Investigation Import to Other Platforms Export Risk Data Export

9. AAD Features : Privileged Identity Management Service to manage , control and monitor access to critical operations Elevating existing permissions Just In Time (JIT)

10. AAD Features : Seamless Sign-on Automatically signed into both on-premises and cloud-based applications Pass-through authentication Authentication agent in on-premises server Credentials never leaves on-premises Password hash synchronization Azure AD stores the hash of hash of the passwords stored in on-premises AD Azure AD Connect is used to synchronize

11. Scopes Root Management Group MG1 MG2 Subscription 2 Subscription 1 Resource Group R R Management Group Resource Group Resource Scope RBAC Policy Budget RBAC Policy Budget RBAC Policy Budget Apply Trusts Trusts Set of resources permissions , policies and costing can be applied at

12. Role Based Access Control (RBAC) Access management to cloud resources Security Principal Role Definition Sco pe

13. Identity Collaboration : B2B Allow external identities to collaborate with organization Allow external identities to use organization’s resources

14. Identity Collaboration : B2C Business to customer identity as a service Customers can use social accounts to connect

15. Thank You! http://dinushaonline.blogspot.com @kumarasiri048