Azure AD Conditional Access is one of the most named features which customer implement to protect their environments. But as with many cloud features at first glance it looks really simple to implement but then the complexity comes visible during rollout. Many customers activating it without thinking what the impact
I’m using a FIDO security key from Yubico since a year for some of my accounts. Now, I had the chance to get a eWBM Goldengate Security Key and test it. The rollout looks the same as for my Yubico keys, but there is one feature which is in my
In nearly every engagement I get the question why it’s not possible to assign Azure AD roles based on Azure AD or synced AD groups. Also, in my opinion this would be a nice feature to have in a productive environment. I started building a solution based on Azure Automation,
Two years ago, we implemented AzureAD PIM in our baseVISION infrastructure to rise the security level. But after some time, we recognized, that it has too many drawbacks because the activation of the requested role took sometimes longer than a few hours. Especially in Exchange, Skype or Intune this was
By default, everyone in your organization with an Office 365 or Azure AD account has access to Compliance Manager and can perform any action in Compliance Manager. So every company with an O356 subscription or Azure AD is probably giving insights to their defense strategy if they are using the
In the last months I got more and more requests to implement Azure AD Application Proxy to publish various services to the internet. One option is not configurable over the Azure Portal, which can be very helpful. If you have to publish a server, for example https://webserver.contos.com to the internet,
When you would like to use “OneNote Web Clipper”, a very useful Microsoft Edge extension, in your company environment in combination with O365 Integrated Apps disabled, then you will face the problem, that just Global Admins can use it. This is because the application requires consent to access user data
During an Windows 10 / MDM / Syntaro project we faced an issue regarding MFA (Multi Factor Authentication). The customer was a local school where not all students have a smartphone during the class. Because of this, we had the requirement to disable MFA in his environment for Azure AD
Azure AD Condition Access is a Microsoft solution to dynamically grant or deny access to Applications based on the User, Device, Location and Risk Levels. In this post, I will tell you how to implement Conditional Access in your environment based on notes from the field. First of all, we
If your company is using cloud resources or publishes their OnPrem Resources to the Internet then most of you just use Username/Password or probably Multifactor Authentication (MFA) for Authentication? To securely publish OnPrem Resources you are using Reverse Proxies in your DMZ? If you answer these questions with yes then,