The user s identities
Download as PPTX, PDF0 likes54 views
This document discusses identity management solutions provided by Azure Active Directory (AAD). AAD allows users to self-manage their identities through features like password reset and multi-factor authentication. It also enables single sign-on for on-premises and cloud applications. AAD provides tools to measure identity security levels and integrate with other identity providers. It is a growing product supported by Microsoft with documentation, procedures, and monitoring. AAD helps users take more responsibility for their identities while improving security.
![Bibliograpy
• Modern Authentication with Azure Active Directory for Web
Applications (Developer Reference)
• [VIDEO] Managing Identities in Microsoft Azure Active
Directory
• Azure AD Introduction For Red Teamers
• Azure AD/Office 365 Single Sign-On with Shibboleth 2
• MyWorkDrive Azure AD SAML Overview](https://image.slidesharecdn.com/theusersidentities-210416141201/85/The-user-s-identities-20-320.jpg)
The user s identities
- 3. About me • ITPro > 30 year • Istruttore Informatico at Comune di Chiaravalle (AN) • Senior Software Developer at INNOTEAM s.r.l. • CTS Senior Member at Federation IDEM AAI • ICT Administrator at Università Politecnica delle Marche • Member of WindowServer.it community • Member of DevMarche community • Member of GetLatestVersion community • Linux Foundation Member
- 4. Users Identities: what’s the needs • Self-manage basic operation as change&recovery; • Strong security and MultiFactorAuthentications; • Manage external figures as collaborators, clients, contractors; • User Exprerience (UX) simple and brended; • Simple integration with other identities providers; • SingleSignOn for on-premises and cloud software products; • Measurement of acceptable security level;
- 5. We start from: /etc/passwd Security Account Manager (SAM) database LDAP Active Directory™ Active Directory™ Federation Services
- 6. Azure Active Directory Features
- 7. Azure Active Directory Features
- 8. Why trust in Azure Active Directory?
- 9. Break Office Perimeter with monitoring
- 10. Passwordless Authentications with AAD With FIDO2 security keys With Microsoft Authenticator App With Windows Hello for Business
- 11. Azure AD self-service password reset
- 12. Personalization and Brending of Login Page User login @ Danske Statsbaner
- 13. Identity Secure Score in AAD How does it work? Every 48 hours, Azure looks at your security configuration and compares your settings with the recommended best practices. • Objectively measure your identity security posture; • Plan identity security improvements; • Review the success of your improvements. How does it help me?
- 14. How be a Service Provider of SPID
- 16. Create AAD App with SSO mode
- 17. Set SAML configuration of AAD App
- 18. Azure Active Directory: the solutions gived It is a growing product with staff, ALM, procedures, docs, support, and monitoring health. It grows user’s self-manage and responsibility. The users can or are obligated to use complex passwords and the MFA, FIDO2 technologies from tenant's administrations. It gives tools to monitor security levels of tenant dynamically. It could be joined to other Identity providers for giving SSO on SaaS and Web applications.
- 19. Bibliograpy • Documentazione Azure Active Directory • Azure Active Directory: Microsoft’s cloud based identity and access management service • Azure Active Directory Authentication Overview: Authentication Fundamentals: The Basics • Deep Dive into Azure Active Directory (Azure AD): Learn Microsoft Azure Active Directory from Basic to Advanced concepts with real time walkthroughs
- 20. Bibliograpy • Modern Authentication with Azure Active Directory for Web Applications (Developer Reference) • [VIDEO] Managing Identities in Microsoft Azure Active Directory • Azure AD Introduction For Red Teamers • Azure AD/Office 365 Single Sign-On with Shibboleth 2 • MyWorkDrive Azure AD SAML Overview
- 21. Bibliograpy • SPID Sistema Pubblico di Identità Digitale • SPID - Regole Tecniche • SPID SAML Check • Identity Provider di test per SPID (docker: italia/spid-testenv2) • SAML-to-SAML Proxy: Satosa-Saml2Spid
- 23. “ Quote