Azure AD Conditional Access Policies were released in 2016. Since then there have been lots of improvements and the prefix has changed from Azure AD to Entra ID. Basic principles have stayed the same, though. Meaning that CA Policies are crucial feature when protecting identities. This blog posts concentrates on Read more…
TL;DR; Easiest way to really secure your Break the Glass account is use FIDO2 security key and store the key in the physical safe. Having way to login to Azure AD management plane after configuration mistake or during technical hiccup is something that every organization should address and plan. Creating Read more…
Best way to prevent password leaks is to go passwordless Social engineering and technical tweaks compromise credentials every day. There have been methods to overcome these problems but they were too complicated for larger adoption until now. Does somebody remember the rise of smartcards? I do and I’m happy that Read more…
A while back Microsoft introduced the ability to use Third party Mobile Device Management compliance data for Intune and Azure AD device compliance and therefore Azure AD Conditional Access. Obviously the recommendation is to use Intune for Mobile Device Management, but there might be scenarios where that is not possible Read more…
After couple of weeks spring version of Microsoft Ignite is in the calendar and a lot of new announcements (at least I believe so). In the beginning of this week I noticed a new Authentication method in Azure AD Portal called Temporary Access Pass. On Monday there wasn’t any documentation Read more…
I had a session about protecting all your cloud applications with Azure AD and Cloud App Security from unmanaged devices in Nordic Virtual Summit 2021 on 10.2.2021. I wrote this article to carry out pretty much the same content than that session. Centralized identity There are many reasons to centralize Read more…
Traditionally desktop or app virtualization specialists have been creating a standardized golden image for the virtualization environment. It has been a normal way and almost no one has challenged it. BUT NOW! Welcome to my world. One day me and my colleagues thought, why on earth we are creating the Read more…
I assume you are familiar with Android Enterprise so I wont waste space explaining it. The reason why many organizations are moving to Android Enterprise is because Google has deprecated the previous Android Device Admin mobile device management mode. Contents of this post include: Android Enterprise Management modes Work Profile Read more…
What is Azure AD Privileged Identity Management? I’m not going into the basics of PIM but you can read it from Microsoft Docs. I strongly recommend to spend the extra budget and effort and deploy PIM which requires Azure AD Premium P2 license. In general PIM helps you to gain Read more…
Executive summary: Do you lock your datacenter with old and poorly protected keys eg. Abloy Classic? Yup, me neither. You need to start enforcing multifactor authentication for privileged actions and/or accounts. Like yesterday. The Problem Protecting admin interfaces is crucial as we know that if someone gets to stand next Read more…