Designing for Identity and Security

Course Audience

Successful Cloud Solutions Architects begin this role with practical experience with operating systems, virtualization, cloud infrastructure, storage structures, billing, and networking.

Course Objective

Learn how to manage security and identity within the context of Azure. Also, you’ll be introduced to multiple SaaS services available in Azure that for integration into existing Azure solutions.

After completing this course, students will be able to:

• Integrate their existing solutions with external identity providers using Azure AD B2B or B2C.
• Design a hybrid identity solution.
• Determine when to use advanced features of Azure AD such as Managed Service Identity, MFA and Privileged Identity Management.
• Secure application secrets using Key Vault.
• Secure application data using SQL Database and Azure Storage features.
• Detail the various APIs available in Cognitive Services.
• Identify when to use the Face API, Speech API or Language Understanding (LUIS) service.
• Describe the relationship to Bot Framework and Azure Bot Services.

Course Outline

Module 1: Managing Security & Identity for Azure Solutions

This module discusses both security and identity within the context of Azure. For security, this module reviews the various options for monitoring security, the options available for securing data and the options for securing application secrets. For identity, this module focuses specifically on Azure Active Directory (Azure AD) and the various features available such as Multi-Factor Authentication (MFA), Managed Service Identity, Azure AD Connect, ADFS and Azure AD B2B/B2C.

Lab : Securing Secrets in Azure

After completing this module, students will be able to:

• Integrate their existing solutions with external identity providers using Azure AD B2B or B2C.
• Design a hybrid identity solution.
• Determine when to use advanced features of Azure AD such as Managed Service Identity, MFA and Privileged Identity Management.
• Secure application secrets using Key Vault.
• Secure application data using SQL Database and Azure Storage features.

Module 2: Integrating SaaS Services Available on the Azure Platform

This module introduces multiple SaaS services available in Azure that are available for integration into existing Azure solutions. These services include Cognitive Services, Bot Service, Machine Learning and Media Services.

Lab : Deploying Service Instances as Components of Overall Azure Solutions

After completing this module, students will be able to:

• Detail the various APIs available in Cognitive Services.
• Identify when to use the Face API, Speech API or Language Understanding (LUIS) service.