In the Masterclass, you will learn how the identity solutions offered by Azure Active Directory and on-premises AD will help you build identity systems for the future using protocols that include OpenID Connect and OAuth 2.0. You will learn how to implement secure authenticate and authorization to applications that can be located on-premises or in the cloud. The source of identity of the users could be from your own corporate network, your Azure AD domain, a partner organization and/or a social identity provider such as Facebook or Google.
«In my roughly 20+ years in the IT industry, this was by far the best class I have taken. Not only did the class meet my expectations in content provided, it far exceeded it. Typically, a lot of classes marked as "advanced" in any way, don't always meet everyone's expectations. The level of detail on everything was fantastic, and all of the material being kept up to date to even include recent preview features was greatly appreciated. The labs were all set up in a way that you were given enough information to succeed, but you had to actively engage to complete.»
The class provides detailed learning through the extensive use of hands-on labs. Attendees will not only learn the fundamentals and principles but also learn how to deploy and troubleshoot the solutions. In-depth learning will be gained through the use of tools, such as Fiddler and WireShark to analyze and understand the protocol flows.
John Craddock is an internationally acknowledged master of identity and access management. John is Microsoft MVP and has been involved in Microsoft solutions since the early days of Windows and Windows NT. His role as an identity and security architect has seen him involved in many IT projects for industry leaders including Microsoft, the UK Government and multi-nationals. John regularly presents highly technical sessions at international events, including Microsoft Ignite.
The Masterclass is a high-energy, action-packed event, crammed with factual information and tips. During the 5-days, John Craddock will help build your knowledge and consolidate your new skills with over 35 hands-on labs.
The class is primarily aimed at IT professionals. However, application developers who are tasked with integrating authentication and authorization with Microsoft Azure AD and/or on-premises AD will significantly benefit from the detailed coverage. Code development is not included in the class, but you will learn about all of the configuration requirements.
The Masterclass is designed to teach you how to solve all the challenging aspects of securing apps in Azure AD and providing an optimal SSO experience for your users.
To attend the Masterclass, you need to be a confident IT administrator with a thirst for knowledge. The Masterclass doesn’t teach basic Azure AD administration, but because of the extensive hands-on, you can come to this class with no prior knowledge of Azure AD. You will pick up the basics as we focus on the more challenging topics.
To gain the maximum from this class and the hands-on labs, you will need hands-on system administrator’s skills. For example, you will need to know how to:
Both the hands-on manual and slides will be available in pdf format. You will also receive a copy build guide, which details how to set up the hands-on virtual environments, and copies of all the scripts and demo websites.
The hands-on labs are all run in a cloud-based virtual environment that will be available to you after the course is completed. The labs are available for 60 days from the course start date. This will allow you to do the labs again and test out other ideas.
Day 1
After a comprehensive introduction to today’s identity challenges and solutions, you will learn the details of the authentication protocols. This in-depth coverage of the protocols will allow you to troubleshoot any problems you may encounter when deploying solutions. As we go through the hands-on labs, you will be expected to troubleshoot any issues you may encounter during the Masterclass. Of course, John will be there if you need help.
Day 1 hands-on labs include:
Day 2
After completing our investigation of the protocols, you will learn how to configure the Azure Active Directory to meet your requirements. You'll discover how to manage the Azure AD through the Azure Portal, using PowerShell and the GraphAPIs. After adding custom domains and branding to your Azure AD, you will see how to enhance security and the user experience using self-service password resets, and MFA
Day 2 hands-on labs include:
Day 3
You will start the day by deploying Azure AD Connect to synchronize on-premises AD users to Azure AD. We will then investigate pass-through authentication and the new SSO capabilities provided by Azure AD Connect. You will learn about the SSO capabilities of Windows 10 when it is joined to Azure AD and how Windows Hello, the authenticator app and FIDO 2 keys can eliminate the need for passwords.
At this stage, you will have created a reliable identity infrastructure, and now it's time to make applications available to our users.
You will start by deploying a SaaS app to your users; configuring groups, assignments and self-service application management. You will then learn how to register your own applications into Azure AD.
Day 3 hands-on labs include:
Day 4
The day starts with configuring an Open ID Connect / OAuth 2.0 app. We then dive into the application model and learning about managing permissions, roles, groups, delegation, APIs and consent. You will discover how to turn your application into a multi-tenant app and make it available to all users from all Azure AD tenants. You proceed to work with the Azure AD Application Proxy to publish applications to the Internet.
Day 4 hands-on labs include:
Day 5
The day starts with configuring the Azure AD application proxy to publish both claims and Windows auth applications using Kerberos constrained delegation. We will then look at the features offered by on-premises AD FS and how they can integrate with Azure AD. The labs support three optional hands-on with AD FS, however due to time constraints these will need to be done outside of class hours. We will stretch our boundaries and see how Azure AD can open access to consumers (B2C) and businesses (B2B).
Day 5 hands-on labs include:
