Category: Security

Azure B2C with AFD and custom domain(s)

Be default Azure B2C comes with onmicrosoft.com login url. If you want to change it, you have to make use of custom domains via Azure Frontdoor. How to? Microsoft has an excellent article to establish this requirement. In the article…

Continue Reading Azure B2C with AFD and custom domain(s)

Storage accounts and the differences between SAS keys and Access keys.

Do you know how to secure your Storage Accounts? How about the differences between SAS keys and Access Keys? Some of you do but many of you don’t, so let me make an introduction to the differences. This is a…

Continue Reading Storage accounts and the differences between SAS keys and Access keys.

Insider risk management continued, device onboarding and protection

Now to part two of this series and onboarding devices to Compliance center. Continuing device onboarding. Go to device onboarding. You have these options to onboard. I will be choosing local scripts but the fundamentals will be the same no…

Continue Reading Insider risk management continued, device onboarding and protection

Key auto-rotation in Azure Key Vault (preview)

Key rotation is Azure Key Vault is crucial for the safety of the keys stored in vault. You can store encryption keys, SAS-keys, user credentials, API keys and other secret then you can call them with in your queries. What…

Continue Reading Key auto-rotation in Azure Key Vault (preview)

AAD Connect – Multiple Azure AD tenants (Public preview)

Long awaited feature is here, now you can synchronize the same users, groups, and contacts from a single Active Directory to multiple Azure AD tenants. This topology implements the following use cases: AADConnect can synchronize the same users, groups, and…

Continue Reading AAD Connect – Multiple Azure AD tenants (Public preview)

Log4j explanation and Microsoft services (Mostly)

You don’t every day see a CVE with the amount of 10/10, but now the day came and in the form of Log4j and LogShell / LogJam vulnerability. What is log4j? log4j is a reliable, fast and flexible logging framework…

Continue Reading Log4j explanation and Microsoft services (Mostly)

Temporary Access Pass what and the how

What is Azure Temporary Access Pass? Passwordless authentication methods, such as FIDO2 and Passwordless Phone Sign-in through the Microsoft Authenticator app, enable users to sign in securely without a password. Users can bootstrap Passwordless methods in one of two ways:…

Continue Reading Temporary Access Pass what and the how

Firewall Manager | DDoS Protection Plans (Preview)

Azure DDoS Protection is currently in Preview. For those DDoS or DoS is not familiar, I will open it a bit before going thru Microsoft service. What is Denial-Of-Service attack? Denial Of Service means that the attacker will send malformed…

Continue Reading Firewall Manager | DDoS Protection Plans (Preview)

Azure SQL Database pricing and security features

What is Azure SQL Azure SQL databases are coming more and more used. They can be expanded on the go with elastic pools or you can use them inside servers like inside on-premises installations. You can have multiple SQL services…

Continue Reading Azure SQL Database pricing and security features

Hybrid identity and how to protect your users?

Hybrid identity in a trendy way to distribute your identity across cloud services. Identity has always been an important part in user interactions with services. It’s your unique identifier in the directory that you belong to. This theme can also…

Continue Reading Hybrid identity and how to protect your users?