Slide 1

MICROSOFT OFFICE 365 HIGH AVAILABILITY SSO (SINGLE SIGN-ON) SOLUTION IN AZURE Prepared for: St. Louis SharePoint User Group (StlSUG) Bruce Gagliolo Jr Cloud Practice Manager, Architect bgagliolo@mailctp.com

Slide 2

2004 Covenant Established 35+ Skilled Professionals In STL 400+ Successful Deployments 100% Client Satisfaction #1 St. Louis Microsoft Managed Partner About Us

Slide 3

COVENANT TECHNOLOGY PARTNERS

Slide 4

WHY IS SSO FOR O365 IMPORTANT? For most organizations, the move to Office 365 (O365) is a leap forward in user experience, productivity, simplification, and savings. But organizations that fail to implement Single Sign-On (SSO) reliably can slip backwards in several key areas. Risk can actually increase and productivity suffer.

Slide 5

WHY IS SSO IN O365 IMPORTANT? For most organizations, the move to Office 365 (O365) is a leap forward in user experience, productivity, simplification, and savings. But organizations that fail to implement Single Sign-On (SSO) reliably can slip backwards in several key areas. Risk can actually increase and productivity suffer. Out of the box, O365 requires a separate user account

Slide 6

WHY IS SSO IN O365 IMPORTANT? For most organizations, the move to Office 365 (O365) is a leap forward in user experience, productivity, simplification, and savings. But organizations that fail to implement Single Sign-On (SSO) reliably can slip backwards in several key areas. Risk can actually increase and productivity suffer. Out of the box, O365 requires a separate user account IT maintaining duplicate accounts and group memberships

Slide 7

WHY IS SSO IN O365 IMPORTANT? For most organizations, the move to Office 365 (O365) is a leap forward in user experience, productivity, simplification, and savings. But organizations that fail to implement Single Sign-On (SSO) reliably can slip backwards in several key areas. Risk can actually increase and productivity suffer. Out of the box, O365 requires a separate user account IT maintaining duplicate accounts and group memberships

Slide 8

O365 BASIC ADFS SOLUTION

Slide 9

Slide 10

Slide 11

WHY IS AZURE VALUABLE FOR SSO? Robust Highly Scalable Platform Quick Deployment Low Operating Cost Global Enterprise Solution without the Investment

Slide 12

WHY IS AZURE VALUABLE FOR SSO? Robust Highly Scalable Platform Quick Deployment Low Operating Cost Global Enterprise Solution without the Investment

Slide 13

CASE STUDY EXAMPLE Requirements Two locations (St. Louis and New York) SSO to Office 365 for SharePoint and Exchange Online SSO to Workday Enterprise SaaS Highly Redundant and Robust Infrastructure Assumptions Single Internet connection at each locations Single Active Directory Forest

Slide 14

HA FEDERATED SSO SOLUTION IN AZURE

Slide 15

Slide 16

Slide 17

Slide 18

HA FEDERATED SSO SOLUTION IN AZURE Download the pre-shared keys for the VPN tunnels. Once your new tunnels have been added, use the PowerShell cmdlet Get-AzureVNetGatewayKey to get the IPsec/IKE pre-shared keys for each tunnel and Set-AzureVNetGatewayKey to apply the values. Value: tPsYiHAQM45hbBOxcGzdZ6dCyVqQ0kSH OperationDescription: Get-AzureVNetGatewayKey OperationId: 0d7efd8b-c4f5-0a49-90ef-0df7d6cb7a1b OperationStatus: Succeeded

Slide 19

HA FEDERATED SSO SOLUTION IN AZURE

Slide 20

PowerShell commands Add-AzureInternalLoadBalancer Add-AzureEndpoint

Slide 21

HA FEDERATED SSO SOLUTION IN AZURE

Slide 22

TECHNOLOGY USED FOR SSO SOLUTION Microsoft Active Directory Federated Services Microsoft DirSync Utility Microsoft Azure Datacenter Virtual Network, Machines, Cloud Services, and Storage Multi-Gateway Virtual Routes Internal Virtual Network Load Balancers Traffic Manager

Slide 23

QUESTIONS Bruce Gagliolo Jr bgagliolo@mailctp.com (314) 445-5980 Office

Slide 24

THANK YOU!