| Microsoft | Azure | Office 365 |
All things Microsoft
You know it’s bad, and you have a policy to block it but are you still at risk? I recently had a fun discussion with the folks at SCI Fridays where we likened legacy authentication to letting your children go naked in public. https://www.linkedin.com/video/event/urn:li:ugcPost:6867114168898596864/ Legacy Authentication, or basic authentication as it is also known, refers …
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow By default, in Azure Active Directory (Azure AD), users can consent to third party applications to access their organizational information – information pertaining to them from the organizational directory. Different permissions allow the application different levels of access to your users’ and your organization’s data. Some application have access to the user’s mailbox and …
Security AND accessibility at the same time I recently spoke at Microsoft Ignite: The Tour about Conditional Access in Azure Active directory and how many organisations tend to block access for their users. This post series is a review of the main takeaways from that talk. In today’s cloud-driven, software as a service productivity working …
One switch to enable the recommended security settings that will protect your tenant from common attacks. Baseline Policies Microsoft have had the intention of protecting your Azure AD tenant for a few years and have allowed administrators to enable any or all of the four baseline policies automatically created in Conditional Access in Azure AD. …
Cloud based SIEM for the people
Why is Legacy Authentication BAD? Legacy Auth, or Basic Auth as it’s also called, is a term used to refer to authentication protocols used by applications that do not use Modern Authentication such as: Older Office clients (e.g., Office 2010 client) Clients that use mail protocols such as IMAP/SMTP/POP Modern authentication is based on the …
Hi again. So it’s been a while since I’ve done one of these. I’ve been busy working and speaking at a couple of events. I spoke at SharePoint Saturday Cape Town on 13th April and I also spoke at Global Azure Bootcamp this Saturday the 27th April. GAB is a global event hosted by local …
Enabling password-less phone sign-in with the Authenticator App for Office 365 / Azure AD So, the Password-less phone sign-in with the Microsoft Authenticator app documentation from Microsoft is pretty substantial, but I wanted to add some of my own notes from my experience in enabling phone sign-in on a tenant: TLDR: Admins Users Enable it …
I wanted to be able to port forward my RDP connections to VMs in Azure. I have done this before on my local virtual lab environment using PFSense.
In Azure I could deploy the open source PFSense from the marketplace but I thought I’d try it with the Azure Firewall instead because it supports source and destination Network Address Translation (SNAT and DNAT).
Recently I visited The Cloud Architects and we had a discussion about my session at Microsoft Ignite The Tour in Johannesburg. Check out the video: