TL;DR; Easiest way to really secure your Break the Glass account is use FIDO2 security key and store the key in the physical safe. Having way to login to Azure AD management plane after configuration mistake or during technical hiccup is something that every organization should address and plan. Creating Read more…
Best way to prevent password leaks is to go passwordless Social engineering and technical tweaks compromise credentials every day. There have been methods to overcome these problems but they were too complicated for larger adoption until now. Does somebody remember the rise of smartcards? I do and I’m happy that Read more…
After couple of weeks spring version of Microsoft Ignite is in the calendar and a lot of new announcements (at least I believe so). In the beginning of this week I noticed a new Authentication method in Azure AD Portal called Temporary Access Pass. On Monday there wasn’t any documentation Read more…
Executive summary: Do you lock your datacenter with old and poorly protected keys eg. Abloy Classic? Yup, me neither. You need to start enforcing multifactor authentication for privileged actions and/or accounts. Like yesterday. The Problem Protecting admin interfaces is crucial as we know that if someone gets to stand next Read more…
Executive summary: There is little to none reasons still using ADFS for Office 365 logins. Azure AD Premium Plan 1 licensed organizations have little to none reasons still using ADFS for anything. Migrate. Now. Previously I have been installing high available ADFS farms to almost every customer that had more Read more…
There are few things to look for, when you have problems in the implementation phase of conditional access or if you want to solve problems that end-users are reporting. If you can’t solve the problem yourself and you have to make a support case for Microsoft, I’ll tell you also Read more…
Introduction In my previous post regarding planning of Conditional Access in your organization I wanted you to understand the different aspects of the policies. I would like also recommend you to read my dear colleague’s post about Conditional Access generally and for what kind of threats it will protect you Read more…
Identity thefts have been the hot topic in Microsoft 365 services during the end half of the year 2018. We have seen many customers affected with identity breaching. Here is an overview on how these breaches happen, why you need to protect your indetities and principles on how to do Read more…
Introduction Conditional Access is a powerful tool in many ways. You could easily create a chaos playing around with it and not fully understanding the consequences. This series is more of a technical approach to implementing your Conditional Access policies so please read Matti’s post about securing the cloud identities Read more…