#authenticationstrengths — Public Fediverse posts

Authentication Strengths in Microsoft Entra ID allows you to granularly define authentication requirements for different situations.

Before authentication strengths were available, authentication requirements were defined globally for the entire tenant, and then conditional access policies could just say that multi-factor authentication was required, for example. But it was not possible to define what type of multifactor authentication was required. So anything that was available globally could be used by all users in all situations.

Which was not optimal. There are situations where a less secure authentication method like SMS or TOTP might be enough. But there are situations where we only want to use very secure authentication methods like FIDO2 when someone is logging into a global admin account for example.

Such granularity was not possible before. If SMS authentication was enabled for a given tenant, even the global admin could use SMS for authentication.

📺 𝐖𝐚𝐭𝐜𝐡 𝐭𝐡𝐞 𝐫𝐞𝐜𝐨𝐫𝐝𝐢𝐧𝐠 𝐨𝐧 𝐦𝐲 𝐏𝐚𝐭𝐫𝐞𝐨𝐧 https://www.patreon.com/posts/microsoft-entra-105282804?utm_medium=clipboard_copy&utm_source=copyLink&utm_campaign=postshare_creator&utm_content=join_link

The recording is also available in Czech language on
𝐅𝐨𝐫𝐞𝐧𝐝𝐨𝐫𝐬 https://www.forendors.cz/p/646afdb06ee2fa16eeabe6c7c27a8627
𝐇𝐞𝐫𝐨𝐡𝐞𝐫𝐨
https://herohero.co/cswrld/post/bceroxowdykkdqmwkexieitgvtiobpq

👍Share, like, comment!

#entraid #authentication #authenticationstrengths #conditionalaccess #cybersecurity #recommendations #tips #videotutorial