Azure AD LAPS (Local Administrator Password Solution) provides management of a single local administrator account on Azure Active Directory or local Active Directory joined devices. The password is then protected in AD while access to the password can be delegated to specific users. The configuration and deployment of modern Azure AD LAPS is simplified with… READ MORE
Azure AD Lifecycle Workflows is a next gen Identity Governance service that enables organizations to manage User lifecycle process by automating JML (Joiner-Mover-Leaver) Process. By understanding and implementing these workflows, you can improve security, simplify management, and streamline your cloud operations. This feature is currently in preview, and require Azure AD Premium P2 license for the… READ MORE
I recently got the question on how to assign Azure AD roles to Azure AD users and app registration (service principal (SPN)) using the Azure AD Graph API with the az cli & az rest command. Here’s an example Python script to assign the Global Administrator role to a user: (replace the ‘valid-user-principal-object-id’ with the objectId of the user object) A copy of the Python code can be found on… READ MORE
The Magnificent 7 Microsoft Security and Compliance Features that you MUST Know! Join Andy Malone, MVP, and watch this webinar recording to learn all about the 7 Microsoft Security and Compliance Features that you must know! Webinar Description – ‘The Magnificent 7 Microsoft Security and Compliance Features that you MUST Know!’ Andy dives into the… READ MORE
PnP PowerShell – What You Need to Know Join Erwin for this webinar recording and learn all about PnP PowerShell and what you need to know! Did you know that SharePoint and PnP (Patterns and Practices) were born out of frustration? Yes, the idea of creating a better platform for sharing and collaborating on documents… READ MORE
An issue that keeps coming up increasingly as users are rolling out Microsoft Teams Rooms on Android (MTRoA), Teams Phone, Teams Panel or Teams Displays, they are struggling to get the device signed in. This is usually because there is a security policy in place to block Android device enrolment of sorts. The first pre-requisite… READ MORE
In my previous blog post, I have explained how we can collect custom attribute values by using Azure AD user flows. We had custom attributes setup in Azure AD and when a guest user accesses an application for the first time, the values for these custom attributes will be collected by using user flows. Azure AD entitlement… READ MORE
What if I told you just using multi-factor authentication (MFA) wasn’t enough anymore? The Lapsus$ hacking group, who were at least partially made up of a group of teenagers in the UK, took a very targeted hacking approach. They used password stuffing to try to breach the password credentials of power users within organizations they were targeting.… READ MORE
I decided to write an post into creation of Azure AD Workload Identity using the option ’Workloads running in compute platforms outside of Azure’ covered @ MS DOCS. The ultimate simplification of workload federation is using Azure AD Client Credentials flow with client private key signed token, where metadata is provided to Azure AD via Discovery URL,… READ MORE
Azure AD Privileged Identity Management allows organizations to manage, monitor, audit access to sensitive Azure resources. One of the main features of PIM is the ability to provide just-in-time (JIT) access to Azure AD and Azure resources. As an example, a user can request to be a Global Administrator for 1 hour. Once a user requests it… READ MORE
