Introduction the Azure Active Directory

1. 1
TOPIC
The User's Identities

2. Who I am
@giulianolatini
giulianolatini
giulianolatini
GIULIANO LATINI

3. About me
• ITPro > 30 year
• Istruttore Informatico at Comune di Chiaravalle (AN)
• Senior Software Developer at INNOTEAM s.r.l.
• CTS Senior Member at Federation IDEM AAI
• ICT Administrator at Università Politecnica delle Marche
• Member of WindowServer.it community
• Member of DevMarche community
• Member of GetLatestVersion community
• Linux Foundation Member

4. Users Identities: what’s the needs
• Self-manage basic operation as change&recovery;
• Strong security and MultiFactorAuthentications;
• Manage external figures as collaborators, clients, contractors;
• User Exprerience (UX) simple and brended;
• Simple integration with other identities providers;
• SingleSignOn for on-premises and cloud software products;
• Measurement of acceptable security level;

5. We start from:
/etc/passwd
Security Account Manager (SAM) database
LDAP Active Directory™
Active Directory™ Federation Services

6. Azure Active Directory Features

7. Azure Active Directory Features

8. Why trust in Azure Active Directory?

9. Break Office Perimeter with monitoring

10. Passwordless Authentications with AAD
With FIDO2 security keys
With Microsoft Authenticator App
With Windows Hello for Business

11. Azure AD self-service password reset

12. Personalization and Brending of Login Page
User login @ Danske Statsbaner

13. Identity Secure Score in AAD
How does it work?
Every 48 hours, Azure looks at
your security configuration
and compares your settings
with the recommended best
practices.
• Objectively measure your identity
security posture;
• Plan identity security improvements;
• Review the success of your
improvements.
How does it help me?

14. How be a Service Provider of SPID

15. SPID authentication workflow

16. Create AAD App with SSO mode

17. Set SAML configuration of AAD App

18. Azure Active Directory: the solutions gived
It is a growing product with staff, ALM, procedures, docs,
support, and monitoring health.
It grows user’s self-manage and responsibility. The users can
or are obligated to use complex passwords and the MFA,
FIDO2 technologies from tenant's administrations.
It gives tools to monitor security levels of tenant
dynamically.
It could be joined to other Identity providers for giving SSO
on SaaS and Web applications.

19. Bibliograpy
• Documentazione Azure Active Directory
• Azure Active Directory: Microsoft’s cloud based identity and
access management service
• Azure Active Directory Authentication Overview:
Authentication Fundamentals: The Basics
• Deep Dive into Azure Active Directory (Azure AD): Learn
Microsoft Azure Active Directory from Basic to Advanced
concepts with real time walkthroughs

20. Bibliograpy
• Modern Authentication with Azure Active Directory for Web
Applications (Developer Reference)
• [VIDEO] Managing Identities in Microsoft Azure Active
Directory
• Azure AD Introduction For Red Teamers
• Azure AD/Office 365 Single Sign-On with Shibboleth 2
• MyWorkDrive Azure AD SAML Overview

21. Bibliograpy
• SPID Sistema Pubblico di Identità Digitale
• SPID - Regole Tecniche
• SPID SAML Check
• Identity Provider di test per SPID (docker: italia/spid-testenv2)
• SAML-to-SAML Proxy: Satosa-Saml2Spid

22. Thanks
Questions?
giulianolatini @giulianolatini giulianolatini

23. “ Quote