| Microsoft | Azure | Office 365 |
Deploy 14 Entra ID Conditional Access Policies in minutes to enable your Zero Trust security strategy Microsoft 365 and Office 365 advanced deployment guides help you set up and deploy your tenant, apps, and services. They include best practices, security features, collaboration tools, and scripts for faster deployment. You can access these guides in the …
Or “Trust, but always verify” Today, I was confronted with the Microsoft Entra ID configuration that allows an administrator of a tenant to “trust” an external party’s Microsoft tenant when guests access resources. In the Zero Trust world, because as the security framework implies, we have zero or no trust of anything, not even our …
Just this week I made a mistake by adding an All Users group to eligibility to a PIM group and in doing so learnt a few things. Some things should have been obvious to me, but also things that are not necessarily obvious. I will take you through what I did and how you can …
First look at Microsoft-managed Conditional Access Policies “Microsoft Managed” is a concept I was introduced to in Entra ID Authentication Methods. The idea was introduced when Microsoft were previewing a new feature. The Microsoft Managed state allows Microsoft to enable or disable the feature. This is supposed to be a convenient way to allow Microsoft …
Security AND accessibility at the same time I recently spoke at Microsoft Ignite: The Tour about Conditional Access in Azure Active directory and how many organisations tend to block access for their users. This post series is a review of the main takeaways from that talk. In today’s cloud-driven, software as a service productivity working …
One switch to enable the recommended security settings that will protect your tenant from common attacks. Baseline Policies Microsoft have had the intention of protecting your Azure AD tenant for a few years and have allowed administrators to enable any or all of the four baseline policies automatically created in Conditional Access in Azure AD. …
In a recent update, Microsoft announced that all Azure AD tenants will require MFA for privileged Azure AD accounts through a “Baseline” Conditional Access Policy. Privileged Azure AD accounts have unrestricted access to your environment. Multi-Factor Authentication (MFA) typically, Username, Password and verification PIN or Biometric, adds a critical second layer of security. The most common privileged account …
Security change in Intune may render devices unable to connect to services As recently announced, there is a security update coming to Intune, that if configured along with Conditional access in Azure AD, could mean users on devices won’t be able to connect to services. If you have used compliance policies with Conditional Access (CA) …
