TL;DR; Easiest way to really secure your Break the Glass account is use FIDO2 security key and store the key in the physical safe. Having way to login to Azure AD management plane after configuration mistake or during technical hiccup is something that every organization should address and plan. Creating Read more…
After couple of weeks spring version of Microsoft Ignite is in the calendar and a lot of new announcements (at least I believe so). In the beginning of this week I noticed a new Authentication method in Azure AD Portal called Temporary Access Pass. On Monday there wasn’t any documentation Read more…
I had a session about protecting all your cloud applications with Azure AD and Cloud App Security from unmanaged devices in Nordic Virtual Summit 2021 on 10.2.2021. I wrote this article to carry out pretty much the same content than that session. Centralized identity There are many reasons to centralize Read more…
After several customer implementations I wanted to discuss about Microsoft Intune MDM automatic enrollment methods and their small caveats related to Multi-Factor Authentication (MFA). We all know the importance of MFA in today’s cloud security and using it with Intune enrollments is a really nice security addition in the process. Read more…
About six months ago I started a blog post series where I was supposed to write also about Zero-touch enrollment. I wrote then two posts about Mobile device Automatic Enrollment: Mobile Device Automatic Enrollment 1/3 – DEP Mobile Device Automatic Enrollment 2/3 – KME My plan was also write from Read more…
There has been a possibility to back up your Microsoft Authenticator’s multi-factor authentication accounts to iCloud for a long time. All Android users have been waiting this feature since it was published to the iOS-devices. Today my Android got a new version of Microsoft Authenticator that includes also the cloud Read more…
I wrote a blog post a week ago about the Apple’s DEP program and how to use it with Microsoft Intune. In the second part of the Mobile Device Automatic enrollment blog series, I focus on Samsung’s KME program. Samsung’s KME program is pretty much the same than the DEP Read more…
29th of January was a big day for Microsoft 365 Security and Compliance solutions. New portal started rolling out to the Microsoft 365 tenants. Of course I wanted to test new portal immediately. Without longer overview sentences let’s get in to it! Two portals Why two portals? Before you had Read more…
There are few things to look for, when you have problems in the implementation phase of conditional access or if you want to solve problems that end-users are reporting. If you can’t solve the problem yourself and you have to make a support case for Microsoft, I’ll tell you also Read more…
Introduction In my previous post regarding planning of Conditional Access in your organization I wanted you to understand the different aspects of the policies. I would like also recommend you to read my dear colleague’s post about Conditional Access generally and for what kind of threats it will protect you Read more…