making sense of microsoft identities in a hybrid world
TRANSCRIPT
Making Sense of Microsoft Identities in a Hybrid World
Jason Himmelstein, SharePoint MVPOffice 365 Advisory Services Manager@sharepointlhornhttp://www.sharepointlonghorn.com
Todd Klindt, SharePoint MVPSharePoint Principal Architect@toddklindthttp://www.toddklindt.com/blog
www.rackspace.com
Who is this Todd Klindt guy?• SharePoint MVP since 2006• Speaker, writer, consultant, Aquarius, Iowa Native• Fan of all sorts of Microsoft technologies• Personal Blog
www.toddklindt.com/blog
• Twitter me! @toddklindt
• If you’re not already sick of him• http://www.toddklindt.com/netcast
www.rackspace.com
That other guy… Jason something
• SharePoint Server MVP • Office 365 Advisory Services Manager, Rackspace• ITPro enthusiast, Business Intelligence geek,
& general technology fan boy• Writes good, Speaks ok, Smells delightful• Re-installed Texan, die-hard Spurs, Longhorns, & Jaguars
fan
• Geek Blog: www.sharepointlonghorn.com • On the Twitters: @sharepointlhorn • GitHub: www.github.com/jasonhimmelstein
www.rackspace.com
• History lesson
• Defining Terminology
• Active Directory Core Concepts & Concerns
• Topology & Security
• Use Cases
• Homework
Agenda
www.rackspace.com
• Bad news… we are ITPros! NO DEV TALK HERE
• Good news… The Microsoft Cloud Show covered the Azure AD dev topics recently!
• http://www.microsoftcloudshow.com/podcast/Episodes/087-catching-up-with-paul-schaeflein-on-azure-ad-improvements
Were you hoping for a dev focused talk?
www.rackspace.com
• Active Directory
• User Principal Name
• Azure Active Directory
• Identity as a Service
• DirSync
• ADFS
• Azure ADConnect
Defining Terminology
www.rackspace.com
Azure AD Connect: Your Identity Bridge
Box
Citrix
Concur
GoToMeeting
Concur
Docusign
Azure AD Connect
(sync + sign on)
Active Directory
LDAP
Other identity stores
DropBox
Google apps
Jive
Salesforce
Servicenow
WorkdayCommonSign on
www.rackspace.com
Hybrid Identity management
Azure AD Connect
Azure Active Directory ConnectConsolidated deployment assistant for your identity bridge components
Azure AD HealthCommon monitoring for your identity bridge components
Sync Services
DirSync
Azure AD Sync
FIM + Azure AD
Connector ADFS
ADFSHealth
www.rackspace.com
• FSMO roles, AD DNS, WINS, NETBIOS, etc
• Dirty, dirty directories
• 2003 (Everyone group) --> 2008 (Authenticated Users group)
• UPN issues around migration
• Schema extensions
Active Directory Core Concepts & Concerns
www.rackspace.com
• Old environment moving to a new Hybrid Estate
• New Farm Identities
• Extranet situations
Use Cases
www.rackspace.com
• Office 365 tenant
• Azure AD Trial
• 2 VMs– 1 AD Domain Controller (ADDC)
– 1 ADDConnect Server
• Download AADConnect
• If you want extra credit…– 1 additional VMs
• 1 ADFS Servers (in real world this would be 2 ADDCs & 2 ADFS with a load balancer)
– SSL cert
Homework