20346D Day 5 Labs

20346D Day 5 Labs

Day 5

Lab 10
(See 20533 Lab 11 update for demo)
Visual walkthrough
Q - business case for hybrid infrastructure
Dirsync has been replaced with "Azure AD Connect"
- advantage = (relative) simplicity of setup
- can be configured for 2 way sync and group sync
- disadvantage = little access to customization (PS module)

Lab 11
Q - business case for SSO
(See 20346C for video of end result)
Federation services .. see concept refs in blog
- advantage = SSO (see video of end result)
- interoperation with other identity systems
e.g. Facebook, LinkedIn, Google+, Windows Live
- users can sign into Office 365 from within their domain or
out on the internet using the SAME credentials and domain name
- can be used in combination with dirsync
- disadvantage = FS is a single point of failure
- solution > use an Azure VM for ADFS and use the HA features
http://metafore2012.blogspot.ca/2015/10/20346-federation-services-login.html
http://metafore2012.blogspot.ca/2015/10/20346-federation-trust.html

Lab 12
Q - monitor user activity
- new reports in preview
- login attempts, email delivery, license usage