| Microsoft | Azure | Office 365 |
This post is not going to go into the basics of DMARC because there are plenty of resources out there on what DMARC is and how to enforce it. For the purpose of this post, however, I will preface it with saying DMARC is an enhancement on SPF and DKIM email security protocols. I assume …
This post is not going to go into the basics of DMARC because there are plenty of resources out there on what DMARC is and how to enforce it. For the purpose of this post, however, I will preface it with saying DMARC is an enhancement on SPF and DKIM email security protocols. I assume …
Azure Virtual Desktop (AVD) is a comprehensive desktop and app virtualization service hosted on Azure. A recent update has brought changes to the behavior of the preferred app group type, impacting how remote applications and desktops are published from the same host pool. This blog post will explore these changes, their implications, and the potential …
Or “Trust, but always verify” Today, I was confronted with the Microsoft Entra ID configuration that allows an administrator of a tenant to “trust” an external party’s Microsoft tenant when guests access resources. In the Zero Trust world, because as the security framework implies, we have zero or no trust of anything, not even our …
Just this week I made a mistake by adding an All Users group to eligibility to a PIM group and in doing so learnt a few things. Some things should have been obvious to me, but also things that are not necessarily obvious. I will take you through what I did and how you can …
Apart from companies who are “Born in the cloud” and only have cloud identities such as Microsoft Entra ID, most organizations are running hybrid identity and are syncing identity objects such as users, groups and devices from on-premises Active Directory to Entra ID. There are however, more and more companies that wish to migrate to …
I recently published an article on Application Governance. Something that is vital to understand as an Identity Administrator.
Managing and securing cloud-native applications is more crucial than ever in today’s online world.
Unassigned roles in Entra ID applications leaves your organization at risk. The role of Entra ID admins is more important than ever. You are not just an Identity expert, you need to be the bouncer at the front door to your organization’s data estate.
Read more on AppGovScore’s Blog
First look at Microsoft-managed Conditional Access Policies “Microsoft Managed” is a concept I was introduced to in Entra ID Authentication Methods. The idea was introduced when Microsoft were previewing a new feature. The Microsoft Managed state allows Microsoft to enable or disable the feature. This is supposed to be a convenient way to allow Microsoft …
I recently shared a video on YouTube which gave a very brief introduction to Microsoft Entra. Over the course of the next few weeks, I will be drilling down into each of the features of Entra. But first here’s the (e)ntr(a)duction courtesy of the new Bing Chat: Microsoft Entra is a family of products that …
You know it’s bad, and you have a policy to block it but are you still at risk? I recently had a fun discussion with the folks at SCI Fridays where we likened legacy authentication to letting your children go naked in public. https://www.linkedin.com/video/event/urn:li:ugcPost:6867114168898596864/ Legacy Authentication, or basic authentication as it is also known, refers …
