Internet Access to Shared Service

Michael Wittenburg, a colleague with MCS - UK, recently sent through a link to a case study of a project I was involved in with him. The Internet Access to Shared Service (IASS) project aimed to provide the UK Ministry of Defence with secure remote access to its line-of-business applications.

You can find the case study here: Case Study - The Ministry of Defence. The IASS solution used combination of multiple products to enable the secure remote access, including:
  • Microsoft Active Directory Directory Services
  • Microsoft Intelligent Application Gateway (IAG)
  • Microsoft .NET Framework
  • Microsoft BizTalk Server 2006
  • Microsoft Identity Lifecycle Manager 2007 FP1 (ILM)
  • Microsoft Internet Security and Acceleration Server 2006
  • Gemalto Chip & PIN (EMV) .Net Smart cards
I spent quite a few weeks at the Microsoft Technology Center (MTC) in Reading, UK working with folks from MCS, Capgemini and other partners to put together this solution. My role was to implement the smart card management and identity synchronization bits, using the ILM Certificate Management solution to manage the Gemalto EMV smart cards and the ILM Identity Synchronization solution to manage the users, provisioning and deprovisioning them from CLM and the UK Government Gateway. Getting all of this to work was quite interesting and a bit of a challenge, working around the various products' idiosyncrasies. However, with a little bit of customization work using the CLM APIs, the project was a success. Have a look at the case study to get more details.

Also, once again, a big thank you to all the guys involved at the MTC: Paul Thomas, David Hoyle, Michael Wittenburg, Mark Allen, Sam Mannix, Diarmuid Curtin, David Chaudry and Adrian Castiallo, to name a few. It was a real pleasure working and having a few pints with you guys.

Comments

Post a Comment

Popular posts from this blog

Five reasons to run SQL Server 2016 on Windows Server 2016

The Microsoft SQL Server team is publishing a five-part series on why to run SQL Server 2016 on Windows Server 2016.   Can you guess reason #1?   Yes, it's security.  We're going to see a much bigger push on the MS front addressing its commitment to a holistic security approach across the whole Microsoft stack, building and integrating security throughout its platforms, and product and service offerings.  Read on to see how SQL Server 2016 on Windows Server 2016 increase your security posture, using features such as Device Guard, Credential Guard, Control Flow Guard and Windows Defender on Windows Server 2016 and Always Encrypted protection, Row-Level Security and Dynamic Data Masking in SQL Server 2016. https://blogs.technet.microsoft.com/hybridcloud/2017/03/23/five-reasons-to-run-sql-server-2016-on-windows-server-2016-1-security/ The second part of the series focuses on the performance increases and cost savings that can be had with SQL Server 2016 on Windows...
Read more

Introducing Azure AD Pass-Through Authentication and Seamless Single Sign-on

Now in public preview, Azure AD Pass-Through Authentication is a 3rd alternative in the options for “single sign-on” between Active Directory and Azure AD.  Designed to remove the infrastructure requirements of AD Federation Services, it provides a more seamless SSO experience than the Password Hash Sync through AAD Connect.    With the use of AAD Connect and a simple connector, AAD PTA relies on secure outbound communication to validate username  and password credentials against your on-premises Active Directory.  No need to sync AD passwords to AAD, nor deploy AD FS! https://blogs.technet.microsoft.com/enterprisemobility/2016/12/07/introducing-azuread-pass-through-authentication-and-seamless-single-sign-on/ https://docs.microsoft.com/en-us/azure/active-directory/active-directory-aadconnect-pass-through-authentication
Read more