Microsoft Azure

Agenda

• Introduction to the Azure AD Business-to-Business Feature

• Basic architecture review

• The main set of tasks for managing external users

• Collaboration demo

You’ll leave with an understanding of …• The benefits of collaborating with your business partners using

Azure AD B2B.

• An understanding of the core functional aspects of Azure AD B2B

Microsoft Azure

Collaboration problems Azure AD B2B is trying to address

Approach 1: Federate with each partner

Security

No user level visibility

Unknown partner security posture

Expense

Small partners can’t afford the infrastructure

Small partners don’t have the expertise

Complexity

Complexity grows with each new partner

Complexity grows on partner side as well

Approach 2: Manage partner identities

Security

Access continues after external user terminated

Exploited external user puts whole org at risk

Too much default access

Expense

Password management

Signup process

Identity cleanup

Overhead of running a separate directory

Complexity

Partner user needs to manage new set of creds

Azure Active Directory

Microsoft Azure

Quick wins with Azure B2B

• No credential management of external users

• Consistent application access mechanisms for SaaS Apps

• SharePoint Online integration

• Deletion/Disablement case covered for larger partners

• Bulk operations

• Azure AD’s security and protection

Microsoft Azure

Managing B2B: Inviting Users

Prepare CSV:

• Required:Email: Email address of invited user. DisplayName: Display name for invited user (typically, first and last name).

Are you the right user and

Are you clicking in the right

place?

Microsoft Azure

Managing B2B: Inviting Users

Prepare CSV:

• Optional:

InvitationText: Customize invitation email text after app branding and before the redemption link

InvitedToApplications: AppIDs to corporate applications to assign users. Get-MsolServicePrincipal | fl DisplayName, AppPrincipalId

InvitedToGroups: ObjectIDs for groups to add user to Get-MsolGroup | fl DisplayName, ObjectId

InviteRedirectURL: URL to direct an invited user after invite acceptance. Could be a landing page or a specific app. If not specified, users are directed to the App Access Panel URL specific to your tenant (https://account.activedirectory.windowsazure.com/applications/default.aspx?tenantId=<TenantID>)CcEmailAddress: Email address to copy emailed invitation. If the CcEmailAddress field is used, this invitation cannot be used for email-verified user or tenant creation

Language: Language for invitation email and redemption experience, with English as the default when unspecified. The other supported language codes are: de, es, fr, it, ja, ko, pt-BR, ru, zh-HANS, zh-HANT

Microsoft Azure

Managing B2B: What the user sees

• Your directory name in the subject

• From Microsoft

• Link for consent and re-usable as a book mark to the application

Microsoft Azure

Managing B2B: Checking on Invites

• Link to report appears after upload

• Standard report in the Reports tab

• Can see every batch uploaded

• Can re-download the batch

• Can download errors for each batch

Microsoft Azure

Managing B2B: Managing Access

• Users are managed like all other users

• Can use direct assignment in the CSV

• Can use Group Assignment

• Can use Dynamic group membership (user.Type = Guest)

• Can use set any attribute via Azure AD Powershell for richer conditions

Microsoft Azure

Demo

Microsoft Azure

What’s coming next for Azure B2B?

• Attestation

• Pricing

• Richer Office 365 integration

• Richer attribute management

• Invitation API

• Delegated Administration of B2B

Microsoft Azure

ResourcesAzure AD B2B Overview:

https://azure.microsoft.com/en-us/documentation/articles/active-directory-b2b-collaboration-overview/

Detailed B2B Walkthrough:https://azure.microsoft.com/en-us/documentation/articles/active-directory-b2b-detailed-walkthrough/

CSV File Format:https://azure.microsoft.com/en-us/documentation/articles/active-directory-b2b-references-csv-file-format/

Current limitations:https://azure.microsoft.com/en-us/documentation/articles/active-directory-b2b-current-preview-limitations/

Sign up for more webinars!- https://info.microsoft.com/AADP-Webinar-CLE_AADP-Main-Landing-Page.html?ls=Email

Deployment wizard -https://portal.office.com/onboarding/azureadpremium#/

Microsoft Azure

Q&A