Session objectives Takeaways Mobility and the cloud is

Session objectives: Takeaways:

Mobility and the cloud is the new normal 66% of employees use personal devices for work purposes. * 25% of all software will be available on a Saa. S delivery by 2020. ** *CEB The Future of Corporate ITL: 203 -2017. 2013. **Forrester Application Adoption Trends: The Rise Of Saa. S ***CEB IT Impact Report: Five Key Findings on Driving Employee Productivity Q 1 2014. 33% of employees that typically work on employer premises, also frequently work away from their desks. ***

Windows Devices PCs/Tablets/Mobile/etc. Ownership Purpose Personal Fun Organizational Fun + some Work (BYOD) Work

Org owned devices – Two models Self-service setup & sign in with Azure AD account Azure AD Join Ideal for users who primarily access Office 365 & Cloud apps Automatic enrollment to MDM Also available on Windows Phone 10! Domain Join only better: Connected to Azure AD Domain Join Great for hybrid orgs with deployment processes in-place Use of existing on-premises management solutions

Windows Devices PCs/Tablets/Mobile/etc. Ownership Purpose Personal Fun Organizational Fun + some Work (BYOD) Work

Personally owned devices – One model Add a Work Account Self-service setup & sign in with Azure AD account Ideal for users who primarily access Office 365 & Cloud apps Automatic enrollment to MDM

Windows Devices PC/Tablets/Mobile/etc. Ownership Personal Purpose Fun Windows 10 Configuration MSA Sign-in Organizational Fun + some Work (BYOD) Add a Work Account Domain Join Azure AD Join

Domain Join Azure AD Join Add a Work Account Ownership Organization Personal Provisioning Prepared by IT Self configure in OOBE Self configure in Settings>>Accounts Management Existing management solutions (e. g. SCCM, GP, etc. ) MDM Resources SSO to enterprise resources hosted onpremises and in the cloud SSO to enterprise resources in the cloud, and to on-premises resources exposed via Proxy SSO to enterprise resources in the cloud. Deployment Traditional work place Seasonal workers, CYOD BYOD Devices PCs and Tablets PCs, Tablets, and Windows Phone

BRK 3332: Discover what's new in device management

Identity is a means to an end, not the end.

Identity/Service Provider 7. Access resources 1. Request. Token. Async App 4. Token 6. Request. Result Browser SSO 3. Authenticate 2. Token request 5. Request result Web Account Provider Microsoft Web Account Provider

is extensible! Identity/Service Provider 7. Access resources 1. Request. Token. Async App 4. Token 6. Request. Result Browser SSO 3. Authenticate 2. Token request 5. Request result Web Account Provider Contoso Web Account Provider

Windows Devices PC/Tablets/Mobile/etc. Ownership Personal Purpose Fun Windows 10 Configuration MSA Sign-in SSO Organizational Fun + some work Work (BYOD) Add a Work Account Domain Join Web Account Manager Azure AD Join

Hardening identity and authentication

Would sell their passwords for less than $1000 20%

Share their password with co -workers % 66 *******

Windows Hello Key based authentication system built into Windows 10 Users create a gesture to use TPM protects a private key used to sign auth requests Eliminates the need to authenticate using a password BRK 2134: Deploy and manage Windows Hello for Business BRK 2063: Secure Windows apps and Microsoft Edge websites with Windows Hello

Windows Devices PC/Tablets/Mobile/etc. Ownership Personal Purpose Fun Windows 10 Configuration MSA Sign-in Organizational Fun + some work Work (BYOD) Add a Work Account Domain Join SSO Web Account Manager Identity Windows Hello Azure AD Join

WINDOWS HELLO COMPANION DEVICE FRAMEWORK Phone Band 2 Wearable USB BRK 2133: Expand Windows Hello Family to companion devices and browser RFID Card

Windows Devices PC/Tablets/Mobile/etc. Ownership Purpose Windows 10 Configuration SSO Identity Personal Fun MSA Sign-in Organizational Fun + some work Work (BYOD) Add a Work Account Domain Join Web Account Manager Windows Hello Companion Device Framework Azure AD Join

Virtualization Based Security

Trustlet #3 Windows Platform Services Device Guard Credential Guard Apps Kernel Windows Operating System Container Hyper-V BRK 2132: End the game for credential theft with Windows 10 Device Hardware Hypervisor

Windows Devices PC/Tablets/Mobile/etc. Ownership Personal Purpose Fun Windows 10 Configuration MSA Sign-in SSO Identity Organizational Fun + some work Work (BYOD) Add a Work Account Domain Join Web Account Manager Windows Hello Companion Device Framework Credential Guard Azure AD Join

Windows for Work (IT admins) - Domain Join, Azure AD Join, Add work account Web Account Manager (Developers) - One stop shop for authentication Windows Hello for Business (IT admins + Developers) - Say bye to passwords! Credential Guard (IT admins) - Protect yourself against Pass the Hash attacks

Windows for Business Keynote GS 07: Deploy Windows 10 for business - the future is closer than you think Dynamic Provisioning BRK 3332: Discover what's new in device management Windows Hello BRK 2134: Deploy and manage Windows Hello for Business BRK 2063: Secure Windows apps and Microsoft Edge websites with Windows Hello Companion Device Framework BRK 2133: Expand Windows Hello Family to companion devices and browser Credential Guard BRK 2132: End the game for credential theft with Windows 10

http: //myignite. microsoft. com https: //aka. ms/ignite. mobileapp

Azure AD Join Overview Azure AD Join on Windows 10 devices Azure AD and Identity Show: Azure AD Join in Windows 10 Domain Join Microsoft Azure Active Directory and Windows 10: Better Together for Work or School

Web Account Manager App APIs Web. Account. Provider APIs Build 2015 – SSO with Secure Authentication SDK samples Other relevant sessions 3 -767: Building Universal Windows Apps with Office 365 APIs 2 -769: Develop Modern Native Application with Azure Active Directory 2 -639: Microsoft Passport and Windows Hello 3 -765: App-to-App Communication: Building a Web of Apps 3 -654: Managing Mobile Devices and Applications in an Enterprise

Windows Hello for Business Overview What is Windows Hello? Windows Hello for Business and AAD: Eliminating passwords one device at a time! Windows Hello for Business APIs Build 2015: Microsoft Passport and Windows Hello: Moving Beyond Passwords and Credential Theft