so let's actually take a look at how
this works in action and let me show you
these concepts of conditional access so
I've got an iPad here now the concept
here is being able to define policies on
what you require in order to approve
access to corporate data and corporate
applications you as an IT organization
need to be able to define policies that
say here's what I require in terms of
device in terms of application and have
that enforced in real time when your
user makes an attempt to access the
corporate resources let's take a look at
this in the context of email now the
conditional access policy that I have
here for this demo is is that the user
requires outlook in order to get access
to corporate email so the first thing
you'll notice here is as I go and
attempt to access email from the inbox
email app on an iOS device all it's in
my inbox is a single email that email
says and is going to instruct your user
that hey you know outlook is required
and you need to be using outlook to
access corporate email now if I flip
over into Outlook here you can see all
my corporate email is flowing and one of
the nice parts about this is all my
corporate email I was completely
separated from my personal email that's
really nice from a corporate perspective
in case you need to be able to wipe the
data you can make sure that you wipe
corporate data without touching the
personal data but let me show you some
of the integration work that we've done
here
you know our vision on iOS and on
Android is for ala to give of that same
experience that same rich experience
that users have been using on Windows
for decades so the integration of
calendaring the integration of meetings
and look at how well if this has been
integrated right here in Outlook I can
go with a single touch I click on that
link I'm automatically signed in to
Skype for business the Skype for
business meeting launches and I get this
incredible experience where my all the
things that I need from a business
perspective to collaborate and be
productive is all integrated
you know Outlook is the highest-rated
email app for iOS and for Android your
users are going to love the fact that
everything is together in one place in
that outlook app again just like they've
used on Windows for decades
[Music]
so you've seen what this looks like from
the end-user perspective let me show you
some of the work now that we've done is
we brought together these different
areas to give you this integrated
experience a defined conditional access
and let me move over to a Windows Device
ok so here I'm on my surface and what
you're looking at now is the new
integrated EMS console this is one of
things I'm actually most excited about
will be worked on here because this is
where you can actually see our vision of
where identity protection and device
management and application management
all come together in one integrated
experience so let me kind of walk you
through this first of all I'm gonna go
show you the conditional access
capabilities right here I can go and I
can set my conditional access policy so
let's go take a look at one of them now
the first thing you're gonna see here is
as I go out and build these conditional
access policies I can associate with all
users I can have with different users
you know you may choose for example to
have more strict conditional access
policy for your high-value targets I can
go and then define which applications
I'm going to apply this to and again you
can you can apply this to cloud apps you
can apply this to apps that are running
inside your data centers you know that
we actually have the ability for you to
expose out but you can build these
conditional access policies for all the
applications that your users need to
have access to now here's the power when
I take a look at the conditions look at
what we have done here we now give you
the ability to define conditional access
policies first based on the risk of the
identity the configuration of the device
what application is being used as well
as the network location this is
something unique to EMS nothing else in
the world gives you the ability to
define conditional access policies
across all of these capabilities