Next generation user credentials & App store for businessIlkka Kaskisaari / Solution Architect (Microsoft)Vision Days 20.5.2015

#MSVisionDays

Next generation user credentials

Easy to deploy two-factor password alternative

Breach, theft, and phish resistant credentials

Single sign-on experience

Convenience for users, with greater security

Example: Windows Hello – biometric authentication http://blogs.windows.com/bloggingwindows/2015/03/17/making-windows-10-more-personal-and-more-secure-with-windows-hello/

Microsoft Passport

Windows Hello

Utilize familiar devices

Secured by hardware

USER CREDENTIAL

An asymmetrical key pair Provisioned via PKI or created

locally via Windows 10

Device-based multi-factor

Identity ProtectionMicrosoft Passport

Simplest implementation optionWorks on existing devicesUser familiarity

PIN

Enables multi-factorEase of useImpossible to forget

Biometrics

Accessing credentials

Identity Protection

App store for business

Volume licensing

Flexible distribution

License reclaim/re-use

Your company store

TOMORROW

WINDOWS STORE

• Modern apps• Sign in with MSA• Pay with credit card, gift card,

PayPal, Alipay, INICIS, mobile operators (Phone)

WINDOWS STORE + Volume Purchase Program (VPP)

“ENTERPRISE APP STORE”

• Modern apps• Organization Store for the org’s

preferred or LOB apps (BSP – Business Store Portal)

• Sign in with MSA to acquire public apps; sign in with AAD to acquire org apps

• Pay with credit card or PO/invoice• B2B purchasing and distribution• Deploy modern apps offline, in

images, and more• Modern app license management

• Sideload line-of-business modern apps

• Deploy apps from the Windows Store (even when the Store UI is disabled) through VPP integration using MDM

© 2014 Microsoft Corporation. All rights reserved.