| Microsoft | Azure | Office 365 |
Or “Trust, but always verify” Today, I was confronted with the Microsoft Entra ID configuration that allows an administrator of a tenant to “trust” an external party’s Microsoft tenant when guests access resources. In the Zero Trust world, because as the security framework implies, we have zero or no trust of anything, not even our …
Just this week I made a mistake by adding an All Users group to eligibility to a PIM group and in doing so learnt a few things. Some things should have been obvious to me, but also things that are not necessarily obvious. I will take you through what I did and how you can …
I recently published an article on Application Governance. Something that is vital to understand as an Identity Administrator. Managing and securing cloud-native applications is more crucial than ever in today’s online world. Unassigned roles in Entra ID applications leaves your organization at risk. The role of Entra ID admins is more important than ever. You …
You know it’s bad, and you have a policy to block it but are you still at risk? I recently had a fun discussion with the folks at SCI Fridays where we likened legacy authentication to letting your children go naked in public. https://www.linkedin.com/video/event/urn:li:ugcPost:6867114168898596864/ Legacy Authentication, or basic authentication as it is also known, refers …
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow By default, in Azure Active Directory (Azure AD), users can consent to third party applications to access their organizational information – information pertaining to them from the organizational directory. Different permissions allow the application different levels of access to your users’ and your organization’s data. Some application have access to the user’s mailbox and …
Security AND accessibility at the same time I recently spoke at Microsoft Ignite: The Tour about Conditional Access in Azure Active directory and how many organisations tend to block access for their users. This post series is a review of the main takeaways from that talk. In today’s cloud-driven, software as a service productivity working …
One switch to enable the recommended security settings that will protect your tenant from common attacks. Baseline Policies Microsoft have had the intention of protecting your Azure AD tenant for a few years and have allowed administrators to enable any or all of the four baseline policies automatically created in Conditional Access in Azure AD. …
Cloud based SIEM for the people
Why is Legacy Authentication BAD? Legacy Auth, or Basic Auth as it’s also called, is a term used to refer to authentication protocols used by applications that do not use Modern Authentication such as: Older Office clients (e.g., Office 2010 client) Clients that use mail protocols such as IMAP/SMTP/POP Modern authentication is based on the …
I wanted to be able to port forward my RDP connections to VMs in Azure. I have done this before on my local virtual lab environment using PFSense.
In Azure I could deploy the open source PFSense from the marketplace but I thought I’d try it with the Azure Firewall instead because it supports source and destination Network Address Translation (SNAT and DNAT).
