SIA 318 Managing and Extending Active Directory Federation

  • Slides: 58
Download presentation
SIA 318 Managing and Extending Active Directory Federation Services Brian Puhl Technology Architect Microsoft

SIA 318 Managing and Extending Active Directory Federation Services Brian Puhl Technology Architect Microsoft Corporation

Identity Provider Federation Service Active Directory Application Provider Federation Service Application

Identity Provider Federation Service Active Directory Application Provider Federation Service Application

1. Identity Provider Federation Service Active Directory Application Provider Federation Service Application User browses

1. Identity Provider Federation Service Active Directory Application Provider Federation Service Application User browses to application a. Anonymous landing page or automatic redirect?

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery Application Provider Federation Service Application

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery 3. Redirects to Id. P Federation Service a. Sign-in against AD Application Provider Federation Service Application

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery 3. Redirects to Id. P Federation Service a. Sign-in against AD 4. Redirects back to Federation services a. Claims provider trust rules b. Relying party rules Application Provider Federation Service Application

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing

Identity Provider Federation Service Active Directory 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery 3. Redirects to Id. P Federation Service a. Sign-in against AD 4. Redirects back to Federation services a. Claims provider trust rules b. Relying party rules 5. Redirects to application Application Provider Federation Service Application

1. Federation Service Application Active Directory User browses to application a. Anonymous landing page

1. Federation Service Application Active Directory User browses to application a. Anonymous landing page or automatic redirect?

Federation Service Application Active Directory 1. User browses to application a. Anonymous landing page

Federation Service Application Active Directory 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery

Federation Service Application Active Directory 1. User browses to application a. Anonymous landing page

Federation Service Application Active Directory 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery 3. Redirects to Id. P Federation Service a. Sign-in against AD

Federation Service 1. User browses to application a. Anonymous landing page or automatic redirect?

Federation Service 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery 3. Redirects to Id. P Federation Service a. Sign-in against AD 4. Redirects back to Federation services a. Claims provider trust rules b. Relying party rules Application Active Directory

Federation Service 1. User browses to application a. Anonymous landing page or automatic redirect?

Federation Service 1. User browses to application a. Anonymous landing page or automatic redirect? 2. Application redirects to federation service a. Home Realm Discovery 3. Redirects to Id. P Federation Service a. Sign-in against AD 4. Redirects back to Federation services a. Claims provider trust rules b. Relying party rules 5. Redirects to application Active Directory

ASP. Net Page: HRD. aspx When service loads HRD. aspx page, check wtrealm and

ASP. Net Page: HRD. aspx When service loads HRD. aspx page, check wtrealm and lookup HRD experience to display

ASP. Net Page: HRD. aspx For each application which requires, convert their desired page

ASP. Net Page: HRD. aspx For each application which requires, convert their desired page from. aspx to. ascx and load into a full screen panel in the. aspx page ASP. Net User Control (. ascx) Note the. aspx page needs a select. WHR method calling Select. Home. Realm()

Note that this team did not want all 4 HRD options to be displayed?

Note that this team did not want all 4 HRD options to be displayed? That’s a problem…

d. XJu. Om. Zl. ZGVy. YXRpb 246 TVNGVA== Base 64 encoded value: urn: federation:

d. XJu. Om. Zl. ZGVy. YXRpb 246 TVNGVA== Base 64 encoded value: urn: federation: MSFT This is the federation service identifier for the claims provider trust partner that the HRD cookie maps to

The default IE user experience does not render anything in the browser behind the

The default IE user experience does not render anything in the browser behind the credential popup

#TE(sessioncode) Talk to our Experts at the TLC DOWNLOAD Windows Server 2012 Release Candidate

#TE(sessioncode) Talk to our Experts at the TLC DOWNLOAD Windows Server 2012 Release Candidate Hands-On Labs microsoft. com/windowsserver DOWNLOAD Windows Azure Windowsazure. com/ teched

Learning Connect. Share. Discuss. Microsoft Certification & Training Resources http: //northamerica. msteched. com www.

Learning Connect. Share. Discuss. Microsoft Certification & Training Resources http: //northamerica. msteched. com www. microsoft. com/learning Tech. Net Resources for IT Professionals Resources for Developers http: //microsoft. com/technet http: //microsoft. com/msdn

Complete an evaluation on Comm. Net and enter to win!

Complete an evaluation on Comm. Net and enter to win!

to evaluate this session now on

to evaluate this session now on

LOGO 13 Active Directory Active Directory Active DirectoryLOGO 13 Active Directory Active Directory Active Directory
OSP 324 Active Directory Active Directory Active DirectoryOSP 324 Active Directory Active Directory Active Directory
SIM 323 Active Directory Active Directory Active DirectorySIM 323 Active Directory Active Directory Active Directory
n n Active Directory Directory Directory Directory Windowsn n Active Directory Directory Directory Directory Windows
Active Directory Active Directory Directory service for WindowsActive Directory Active Directory Directory service for Windows
SIA I JEJ WACIWOCI Sia jako wektor SiaSIA I JEJ WACIWOCI Sia jako wektor Sia
SIA I JEJ CECHY SIA WYPADKOWA I SIASIA I JEJ CECHY SIA WYPADKOWA I SIA
sia Localizao da sia l l A siasia Localizao da sia l l A sia
Windows Active Directory and Audit Windows Active DirectoryWindows Active Directory and Audit Windows Active Directory
Welcome u Active Directory Site u Active DirectoryWelcome u Active Directory Site u Active Directory
Usuga Active Directory 8 Usuga Active Directory skupiaUsuga Active Directory 8 Usuga Active Directory skupia
Windows Azure Active Directory Active Directory Domain ServicesWindows Azure Active Directory Active Directory Domain Services
ACTIVE DIRECTORY Active Directory a kaynaklarn verimli birACTIVE DIRECTORY Active Directory a kaynaklarn verimli bir
Active Directory Domain Services ADDS Active Directory DomainActive Directory Domain Services ADDS Active Directory Domain
ACTIVE DIRECTORY Active Directory a kaynaklarn verimli birACTIVE DIRECTORY Active Directory a kaynaklarn verimli bir
2 3 PLAN ACTIVE DIRECTORY Active Directory Replication2 3 PLAN ACTIVE DIRECTORY Active Directory Replication
1 1 INSTALL ACTIVE DIRECTORY Active Directory Overview1 1 INSTALL ACTIVE DIRECTORY Active Directory Overview
Directory structure Slide 2 Directory Structure A directoryDirectory structure Slide 2 Directory Structure A directory
SIA 317 Active Directory Virtualization Safeguards and DomainSIA 317 Active Directory Virtualization Safeguards and Domain
SIA 313 SelfService Password Reset for Active DirectorySIA 313 SelfService Password Reset for Active Directory
SIA 205 Active Directory Domain Services on WindowsSIA 205 Active Directory Domain Services on Windows
SIA 322 Windows Azure Active Directory Graph APISIA 322 Windows Azure Active Directory Graph API
SIA 402 How to undestroy your Active DirectorySIA 402 How to undestroy your Active Directory
Extending Active Directory Authentication and Account Management ToExtending Active Directory Authentication and Account Management To