TL;DR; Easiest way to really secure your Break the Glass account is use FIDO2 security key and store the key in the physical safe. Having way to login to Azure AD management plane after configuration mistake or during technical hiccup is something that every organization should address and plan. Creating Read more…
Best way to prevent password leaks is to go passwordless Social engineering and technical tweaks compromise credentials every day. There have been methods to overcome these problems but they were too complicated for larger adoption until now. Does somebody remember the rise of smartcards? I do and I’m happy that Read more…
Executive summary: Do you lock your datacenter with old and poorly protected keys eg. Abloy Classic? Yup, me neither. You need to start enforcing multifactor authentication for privileged actions and/or accounts. Like yesterday. The Problem Protecting admin interfaces is crucial as we know that if someone gets to stand next Read more…
Executive summary: There is little to none reasons still using ADFS for Office 365 logins. Azure AD Premium Plan 1 licensed organizations have little to none reasons still using ADFS for anything. Migrate. Now. Previously I have been installing high available ADFS farms to almost every customer that had more Read more…
When starting to use any cost management or reporting solution, one always stumbles on Azure ‘feature’ of non-inhering tags. All analysis software assume that resources have tags and admins tend to find it easy to set tags on resource groups. Sounds familiar? Searching the internet I found couple of solutions Read more…
Have you tried making a ‘simple’ script to monitor directory and when new content arrives move that to another location or do simple transformations on the filename? I have tried and frustrated. You must think of scheduling, manipulation logic and error handling. Logic Apps is an Integration platform that an Read more…