Category: Identity

Insider risk management continued, device onboarding and protection

Now to part two of this series and onboarding devices to Compliance center. Continuing device onboarding. Go to device onboarding. You have these options to onboard. I will be choosing local scripts but the fundamentals will be the same no…

Continue Reading Insider risk management continued, device onboarding and protection

Key auto-rotation in Azure Key Vault (preview)

Key rotation is Azure Key Vault is crucial for the safety of the keys stored in vault. You can store encryption keys, SAS-keys, user credentials, API keys and other secret then you can call them with in your queries. What…

Continue Reading Key auto-rotation in Azure Key Vault (preview)

Azure AD Connect 2.0.89.0 – How to un-break your Exchange Hybrid

AAD Connect v.2.0.88.0 came just a week ago and it had an ugly bug. What’s wrong? All the user that will be disabled in Exchange Hybrid environments will have their mailboxes deleted from the cloud. Shared Mailboxes had a long…

Continue Reading Azure AD Connect 2.0.89.0 – How to un-break your Exchange Hybrid

AAD Connect – Multiple Azure AD tenants (Public preview)

Long awaited feature is here, now you can synchronize the same users, groups, and contacts from a single Active Directory to multiple Azure AD tenants. This topology implements the following use cases: AADConnect can synchronize the same users, groups, and…

Continue Reading AAD Connect – Multiple Azure AD tenants (Public preview)

SSPR writeback to disconnected forests using AAD cloud sync (Public preview)

What is AAD Cloud sync? Azure AD Connect Cloud sync is a light-weight agent that is commanded from the cloud. So there is no databases with the agent unlike with the old Azure AD Connect. I wrote a post about…

Continue Reading SSPR writeback to disconnected forests using AAD cloud sync (Public preview)

Log4j explanation and Microsoft services (Mostly)

You don’t every day see a CVE with the amount of 10/10, but now the day came and in the form of Log4j and LogShell / LogJam vulnerability. What is log4j? log4j is a reliable, fast and flexible logging framework…

Continue Reading Log4j explanation and Microsoft services (Mostly)

What is Azure B2C and how to use it?

Azure B2C is a authentication portal for social, personal and corporate accounts. The authentication is based on OpenID Connect. You can modify the login pages, add identity providers, give all Azure AD tenants the right to login thru your tenant….

Continue Reading What is Azure B2C and how to use it?

Mandatory one-time password is coming, are you ready?

Microsoft has statement in the in their docs saying. “Starting November 1, 2021, we’ll begin rolling out a change to turn on the email one-time passcode feature for all existing tenants and enable it by default for new tenants. At…

Continue Reading Mandatory one-time password is coming, are you ready?

Temporary Access Pass what and the how

What is Azure Temporary Access Pass? Passwordless authentication methods, such as FIDO2 and Passwordless Phone Sign-in through the Microsoft Authenticator app, enable users to sign in securely without a password. Users can bootstrap Passwordless methods in one of two ways:…

Continue Reading Temporary Access Pass what and the how

Whats new with conditional access and Microsoft authenticator

Conditional access has some new cool features that will provide extra security for your user logins. In this post I will cover some of them. Will be digging deeper on these as they evolve but for now it’s important for…

Continue Reading Whats new with conditional access and Microsoft authenticator