Table of Contents

Resources:Diagrams:Projects:BASE:SAD:Integration View

Azure Stack

Azure StackAzure ServicesStandard Azure Services..Shared Platform ServicesVisual Studio Team ServicesStorage ServiceSql ServiceNetworking ServiceDirectory ServiceMicrosoft Azure (Compute & Storage)MSA/LiveIDMicrosoft Global Foundation Services (GFS)

Integration View/Service Integration Categories

High Level Service Components3rdPartyCloud Service ProviderStorageMessagingCacheIdentityWeb ServicesETLMonitoringIDAService ExternalData Sourcesand ServicesMalwareVerificationServiceSMTPService Geo/IPServiceSocialMediaServicesSecure KeyStorageServiceSqlDbServiceNoSqlDbServiceBlobStorageServiceEventServices PubSubServices MemCacheService DirectoryServices  SysCoreServiceSysModule1 to XCloudETLServiceMetricMonitoringServiceClientUser Agent HTTPS leveragecommonrouting,broker& otherservices

Integration View/Service Component Integration

High Level Service ComponentsCloud Service ProviderSecureKey StorageServiceCoreServiceModule 1 to X MemCacheServiceBlobStorageServiceApplicationInsightsServiceSqlService DocDbServiceEventServices CloudETLServiceClientUser Agent IDAService ExternalData Sources MalwareVerificationServiceretrievesecrets leveragecommonbrokerservicesmonitorHTTPS Note:Routing to Module APIendpoints, AAA, etc.done by Core(via Interception)HTTPS trust consumeuseHTTPSHTTPSHTTPSnotify1433HTTPSHTTPSretreiveHTTPS 

Integration View/High Level Component

Integration with remote ServicesClientsSystemDMZApp ServerSourceWebBrowserRemoteSystemsAPIs can be invokedfrom multiple devicesBASEDBData can be cachedclosest to client Useby using APIs toretrieve it from onprem servers (throughnecessary DMZ)ProxyAn IIS + Url Rewrite Module+ (optionally) ARR Modulebased Proxy can be used topass API calls through theDMZBASEDBData can be cachedclosest to cloud useusing ETL for legacysystems or APIs incurrent systemsSource SystemData can be sourced from oneor multiple internal sources.cacheremotedataTCP 1433cacheremotedataTCP 1433HTTPSHTTPSHTTPSHTTPSAPI syncHTTPSETL syncTCP 1433

Integration View/Load Balancer

…

Integration with remote IdP

Integration with remote IdPServiceClientIdP ServiceRetrieve Id Tokenover HTTPSVerify Tokenover HTTPSODATA RESTover HTTPS

Integration with remote Principal Context Information Services

Integration with remote Principal Context Information ServicesServiceESLI4LEVASISISystem Authorisation ServiceIdP ServiceEOI ServiceRelationships ServiceGoverance Rules ServiceComponentsComponentsClientretrieve Id Tokenover HTTPSverify Tokenover HTTPSverify EOI score of Identityover HTTPSquery org/familyrelationshipsover HTTPSquery org rulesover HTTPSrely uponquery

Integration with remote Principal Context Information Services

Integration with remote Principal Context Information ServicesServiceSystem Authorisation ServiceClientIdP ServiceEOI ServiceRelationships ServiceGoverance Rules Serviceretrieve Id Tokenover HTTPSverify Tokenover HTTPSverify EOI score of Identityover HTTPSquery org/familyrelationshipsover HTTPSquery org rulesover HTTPS

Integration with Public Blob Storage

Public Blob Storage IntegrationAzureApp ServicesAzure Key Vault ServicesCloudAzure ADCoreKey VaultAntiMalware ServiceService Clientupload mediadepends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBACretrieve ServiceAccount Idand Secretsprovide media + subscription secretsto remote serviceto validate mediaover HTTPS

Integration with Public Blob Storage

Public Blob Storage IntegrationAzureApp ServicesAzure Storage ServicesStorage AccountAzure Key Vault ServicesAzure ADCorePublic Storage Account ContainerKey VaultService ClientHTTPSdepends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBACretrieve Accountor Container SASProvideURL + Item SASto Clientuse URL + SASto retrieve mediaover HTTPS

Integration with Private Blob Storage

Private Blob Storage IntegrationAzureApp ServicesAzure Storage ServicesStorage AccountAzure ADCorePrivate Storage Account ContainerHTTPSdepends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBAC

Integration with Relational Database Service

Integration with Relational Database ServiceAzureApp ServicesAzure SQL ServicesDatabase ServerAzure ADCoreDatabaseintegrated securityover TCP 1433depends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBAC

Integration with Directory Services

Integration with Directory ServicesAzureApp ServicesCoreAzure ADservice account

Integration with Key Vault Services

Integration with Key Vault ServicesAzureApp ServicesAzure Key Vault ServicesAzure ADCoreKey Vaultdepends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBAC

Integration with Key Vault Services

Integration with Document Db Storage ServiceAzureApp ServicesDefault Azure ServicesDocument Db ServiceCoreDocument Db ServiceAKVdepends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBAC

Integration with Azure Document Storage

Integration with Document Db Storage ServiceAzureApp ServicesDefault Azure ServicesAzure ADCoreDocument Db Servicedepends on toprovide serviceaccount tokendepends on tovalidate tokenand provide RBAC

Integration with Redis Cache

Integration with On Memory Cache ServiceAzureComputeDynamically Horizontally ScalableIn Memory Cache ServiceServiceServiceClientSSLTCP 6380SSLTCP 6380

Integration With On Premise Services

Integration with On Premise ServicesAzureStorageComputeSqlDatabaseOnPremiseDMZCorpAppsDWStorageAccountServiceDbProxyServiceDbClientHTTPS1433HTTPS

Standard Services