NAMITA SINGH: Welcome to
on-demand session on
Microsoft Entra External Identities.
My name is Namita Singh.
I'm a Senior Product Manager here at Microsoft and
I focus on end-to-end Admin experiences.
YOEL HORVITZ: My name is Yoel Horvitz.
I'm a Program Manager with
the Microsoft Security
Customer Experience Engineering Team.
NAMITA SINGH: As companies expand
their digital presence and offer more services online,
they increasingly face the challenge of ensuring
customer data security and fraud prevention,
and also building long-term customer relationships.
Let's explore this further with
respect to a few key players in the space.
Administrators, they have a cumbersome task
to manage policies and meet security needs,
while also ensuring beautiful,
seamless experiences for their consumers.
Developers at the same time,
often struggle to keep up
the challenging security guidelines and standards,
and may prefer to outsource the security while they
focus on developing impactful business applications.
End user or consumer on the other hand have become
more aware of how companies
manage their security and privacy data.
They expect to receive best-in-class services with
ease without having to worry about the security risks.
Getting the right identity solution is
extremely critical for the success of any business.
Microsoft comes with a decade of background
and affluent customer-base in identity space.
Our customers include many of
the world's largest organizations,
from healthcare to utilities,
retailers, and governments.
Being the biggest identity platform in the world,
we work with the most demanding customers
with the scale needs.
Today, some of the largest customers exceed
200 million accounts and companies continue to grow.
With the public privilege of
Microsoft Entra External Identities for customers,
our goal is to unlock
the core identity platform capability by providing
an integrated and consistent platform
to manage all your identity needs.
Although, it's the same rich platform,
there is still a separation on how you configure
your B2C scenario versus your B2B scenarios.
With the separation in configuration,
you get the appropriate set of
default settings and privileges right at the start.
YOEL HORVITZ: Let's have a quick look on
what makes it so unique.
This platform provide the tools to design beautiful,
easy to customize and
branded user authentication experience.
It provides best-in-class scaling resiliency plus
anti-fraud in ID verification
to prevent costly breaches and abuse.
It is developer-friendly,
Mobile ware applications and everything in between.
Inside and outside Azure are quick to build,
easy to deploy, and reliable to operate.
Microsoft continues to innovate,
so you get access to future enhancements,
which makes this future-proof and
unified platform for all your identities.
The company branding feature
allows organization to customize
the user interface so it
blends seamlessly into your applications look and feel.
The URL that appears under this bar can be customized,
so it is an extension of your domain name.
Language customization allows you
to accommodate different languages to suit
your customers need or providing
a great branded experience for your customers.
Users are empowered to register to
our online services by themselves.
Manager profile, delete your account and
the role on MFA method or reset your password,
with no Administrator or Helpdesk involvement.
Discords have companies under the millions of dollars and
build strong trust relationship with our consumers.
NAMITA SINGH: When customers interact
with your applications,
they want to choose their preferred identity,
which can be a social identity and enterprise
identity or a managed account with a username,
password or a onetime passcode.
Entra External Identities for customers,
now supports social IDPs like Facebook and Google,
while we continue to add more IDPs to the list.
Integrating an identity solution into
an existing business logic can be hard.
But with custom claims provider feature,
you can effortlessly add
your own business logics and workflows.
For example, you can add user
attributes to your security token from
data stores that leave outside of the user directory
or even validate users
input during the registration process.
YOEL HORVITZ: To enable single sign-on,
all you need is to create
an application or use an existing one.
At Microsoft syndication library,
register your application in
Azure Active Directory and configures a user experience.
However, now with a new Developer Center,
it's just one simple step.
Microsoft Graph API enables you to
access Microsoft Entra External identities
for our costumers in
ultimate all these frequent
time-consuming and error-prone Cloud management tasks
through an API interface.
You can use Microsoft Graph API with PowerShell script,
GitHub workflows or Azure Automation service.
NAMITA SINGH: To create
a smooth and secure experience
for your customers,
Microsoft Entra External Identities,
efficiently balances the user experience and security.
Access to application is
protected using strong authentication,
risk-based adaptive access policies
without having to compromise on-user experience.
Role-based access controls
and Group-based Access Controls
allow you to enforce authorizations in your applications.
It helps you to manage who
have access to your application,
what they can do with the application,
and what areas they have access to.
YOEL HORVITZ: Customers care
deeply about their data.
They are not always familiar with your privacy policies
in term of use like your employees and partners are.
For example, individuals have the right to
see and edit all the data
associated with their identity,
and have the right to request the deletion of
all the data in
the line with the industry standard alerts.
Customer identity and access
to management solutions require
supporting hundred and thousands
of globally distributed customers.
Microsoft Entra External Identities
is capable of supporting
millions of users and
billions of authentications per day.
It takes care of the scaling
and the safety of the syndication platform.
Customers can easily abandon your service in favor of
another brand after having a bad experience.
Our Cloud services are designed to handle
increased load, recover from failures,
remain resilience, we slow latency,
and to reboot, which are all
important keys to your business success.
NAMITA SINGH: By signing up with one of
the world's biggest identity platform,
you can rest assure to get the access
to cutting edge technologies and innovations,
such as verified ID and
zero trust in one single integrated platform.
We will now take you through the product demo.
Before we do that,
let me quickly cover how easy it is to get started.
Microsoft Entra External Identities offer
three key Developer Center tools.
The Developer Center serves as
a comprehensive starting point to
evaluate our product to see
if this will help you meet your goals.
Our free trial allows you to explore the features
and capabilities without making any commitments.
You will then be guided through
customizing your sign-in experience,
trying it out to create your first user,
setting up your sample apps in minutes.
The Developer Center make it easy for
developers to find our solution.
Quickly see the possibilities
of what you can build with it,
and how it will help you achieve your goals.
It will act as a central repository for
all developer focus content and
documentation that developers can
keep referring to throughout the product life cycle.
It can act as an efficient way to find content which
is scattered across
various places like product documentation,
YouTube channels, blog sites,
and we have all of this information presented in
a well organized and easy to navigate format.
We hope to reduce friction in the developers
learning code by providing access to quickstarts,
step-by-step tutorials, and how to
reduce to provide a consistent learning journey.
Finally, we intend to provide
new developers a sense of community
and support by providing access
to forms such as Stack Overflows,
Microsoft Q&A, which will
directly be accessible from Developer Center.
You can sign up for 30 days
free trial today at aka.ms/ciam/dev.
It is lightweight registration process,
you only need a Microsoft account or an email address.
Anyone can sign up
both new users and
existing Entra External Identity customers.
No permit information or
Azure AD subscriptions are required.
If you are an existing Azure AD customer,
simply sign into your Entra portal
and create a customer tenant.
After signing up for trial,
you will be guided through
the basic configuration so that you can see
your sign-in experience working in minutes.
First, you will configure your sign-in experience,
you can choose from what sign-in
method and change your UI styling options,
then your signing experience will be ready
for you to try out in a browser.
You can use this live login box
to create your first user.
Next, you can see how
sign-in experience can be integrated with
an application by setting up
a sample app on your local machine.
Finally, you will be directed to Admin Center,
where you can view the configurations created by
the guide and explore the range
of configuration options there.
YOEL HORVITZ: To demonstrate the new
Microsoft Entra External Identities,
amazing login experience,
we will use the Woodgrove
Groceries demo ware application.
Woodgrove Groceries is a global retail food store.
The company's strategic commitment
to being an innovator,
it always brings
customer modern online shopping experience.
They decided to use Microsoft Entra External Identities
as their identity provider.
To configures our syndication experience,
they use Microsoft Entra Portal.
Let's now see how they did so.
Later, we'll show you
the Woodgrove Groceries demo ware application.
Let's open a web browser and navigate to
entra.Microsoft.com
and sign in with administrator account.
From the menu,
we select external identities and then use the flows.
We don't have a user flow so we create a new one.
User flows define this step,
user we follow during the sign-in or a sign-up.
Let us enter a name for
the new user flow
then we select that any providers user can sign in with.
We choose Facebook, Google,
and E-mail with Password.
Select the attributes to collect from
the users during registration flow.
We also select a custom attribute called special diet.
That's all. Select "Create" to create a user flow.
Now open the user flow we just
created and make some changes.
From the menu, select
"Custom authentication extensions".
A custom authentication extension
allows us to call a REST API.
REST API can validate the sign-up user input,
and in this demo, it,
we validate the CTR attribute.
The custom authentication extension
already configuring these dynamics.
We select it and save the changes.
To customize the registration page
from the menu select page layouts.
Next, we reorder
the attributes to collect on the registration page.
First the displayName,
then the givenName, and surname.
For the country attribute,
we change it to RadioSingleSelect.
Then way some keys and values and save the changes.
Next we are going to configure
the branding of the login pages.
From the menu, select "Overview".
Then select "Customize unique sign-in experience".
We are going to customize the sign-in
experience for the default language.
To start, we select "Customize".
Provide a favicon.
This icon appears in the favorite and in the browser tab.
Background image.
Then select "Next".
We want to show both the header and the footer,
so we select both of them.
Upload a CSS file,
that contains the Woodgrove CSS style sheet.
Select "Next". Select the headerlogo.
Provide links for privacy in term of use policies.
Upload the bannerlogo.
For the sign-in page text,
we add a welcome message.
Administrators can also customize
labels on assigning pages.
For example, change the sign-in label to login.
We will skip the localization for this demo.
Good. Let's create the company
branding for the default language.
That's it. We will now navigate to
the Woodgrove groceries online store, wggdemo.net.
Lucas, a new customer
opens the Woodgrove groceries application.
Woodgrove offers some items customer can purchase.
To add an item to the cart,
the customer feels need to
register or sign in with an existing account.
You select the sign-in button on the top of the page.
The sign-in pages fully customize with
a Woodgrove brand so that it blends
seamlessly into their applications look and feel.
The domain of that operates in
the address bar is
an extension of the Woodgrove domainian.
Customers can associate the sign-in
experience with the Woodgrove brand.
Users can sign in with their e-mail address and
password or create a new account.
The sunny text appears with
some guidance for the customers,
and users can also sign in with their social account,
such as Facebook and Google.
The footer contains link to the term of
use and privacy policies.
Lucas wants to sign it with his Facebook account,
so we select the Facebook sign-in option.
He logs in with his Facebook account.
As in content doesn't require permissions.
To create a new Woodgrove account,
he provides some information such as display name,
given name, and surname.
He selects his country of residence.
Now, Lucas types a wrong city name, Berlin.
We will see soon what would happen.
He can also provide diet preferences.
Then he select "Next" to create a Woodgrove own identity.
He get an error method that
Woodgrove does not operate in DCT.
These validation is done using
the custom extension we configured earlier.
Lucas correct the city name
and tries to complete the registration again.
Good. He signed in and his name appears in the top menu.
Now we have the option to add items to the cart.
Selecting the name from the menu
show the security token that
was returned to the application by Microsoft Entra.
It includes a user object id, the name,
and also the loyalty number that was generated for
Lucas by a custom extension REST API.
Selecting the profile icon
shows a user profile's attributes.
Lucas can update or delete his account.
This is done using Microsoft Graph API.
You are invited to use a Woodgrove demo application and
try out some of the scenarios
such as multi-factor authentication,
self-service password reset, and more.
Select one of the scenarios,
read instructions, and start the sign in flow.
NAMITA SINGH: Let's recap
the amazing features in
Microsoft Entra extended identities for customer.
It is a unified, future-proof,
developer-friendly platform to create secure, seamless,
and great identity experiences
for your applications and APIs.
YOEL HORVITZ: All of these amazing
features are available
to try out with our new free trial.
To get start, navigate to aka.ms/ciam/dev.
NAMITA SINGH: Thank you for your time and
attention today and
we look forward for your engagement and feedback.