home.social

#azuread — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #azuread, aggregated by home.social.

  1. 🟦 Entra ID Backup. What you Need to Know!

    Microsoft has added built in backup and restore to Entra ID — a big win for admins. 🔹
    It creates automatic daily backups with five days of retention.
    Backups cannot be disabled or deleted even by admins.
    Restores cover users groups apps and policies enabling faster recovery and compliance.

    💡 Daily backups retained for five days
    🔍 Restore users groups apps and policies
    ⚖️ Backups stored in tenant geo for compliance

    Want a short guide to get started?

    #EntraID #IdentityBackup #AzureAD #CloudSecurity
    ▶︎hubsite365.com/en-ww/pro-offic

  2. RE: infosec.exchange/@merill/11618

    Android Authenticator

    Root Detection

    🚨⚠️🚨⚠️🚨⚠️🚨⚠️

    #MicrosoftAuthenticator on #Android
    strictly blocks usage on rooted or
    jailbroken devices.

    Relies on Google
    Play Services;

    privacy-focused OS
    distributions (e.g., #GrapheneOS)
    lacking Play Services will be
    completely blocked.

    THIS WONT MAKE EVERYONE HAPPY

    #EntraID #AzureAD

  3. 🟦 Entra ID Access Reviews — Beginner's Guide

    New walkthrough demystifies Microsoft Entra ID Access Reviews and how they enforce least privilege 🚀

    💡 Access review basics and workflow
    🔍 Setup steps roles and scopes
    ⚖️ Automation recommendations and audit trails

    ▶︎hubsite365.com/en-ww/pro-offic

    Watch the video for a step by step demo and a preview of upcoming features. Requires Entra ID P2 or Governance licensing for full capabilities. What access review challenge are you tackling next?

    #EntraID #IdentityGovernance #ZeroTrust #AzureAD

  4. "While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful #EntraID #vulnerability that I will probably ever find. This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments). If you are an Entra ID admin reading this, yes that means complete access to your tenant." 😲

    dirkjanm.io/obtaining-global-a

    #Microsoft #security #Cloud #Azure #AD #ActiveDirectory #AzureAD

  5. EntraFalcon is a PowerShell-based security assessment tool to evaluate the security posture of a Microsoft Entra environment: github.com/CompassSecurity/Ent #security #pentest #entraid #azuread

  6. 🎙️ BIG NEWS: I'm launching Entra.Chat - the podcast identity pros have been waiting for!

    After years in the identity trenches, I've seen a lot - the midnight calls, the authentication puzzles, and those "how is this even possible?" moments.

    That's why I created EntraChat - to share the REAL stories behind Microsoft Entra deployments that you won't find in documentation.

    My first episode drops TODAY with identity wizard Ben Wolfe, who reveals how his team migrated 700 apps and 30,000 users from Okta to Microsoft Entra in just 90 days (while implementing Windows Hello for Business simultaneously!)

    I've already recorded amazing conversations with identity leaders who've solved problems you're probably facing right now. Their candid insights and battle-tested solutions might just save your next deployment!

    Upcoming episodes include conversations with
    ❤️ Kuba Gretzky - Creator of EvilGinx
    ❤️ Martin Sandren - Product leader at Ikea
    ❤️ Dhanyah Krishnamoorthy - Product Manager, Microsoft Entra for Connect Sync and Cloud Sync
    ❤️ Samantha 🦚 Kloos-Kilkens -
    ❤️ Nathan McNulty - Fountain of knowledge on all things Microsoft Security

    Who's ready to level up their identity knowledge?

    Drop a 💙 if you're as excited about this as I am!

    Subscribe with your favourite podcast player:
    🎧 Apple Podcast - podcasts.apple.com/us/podcast/

    🎧 Spotify - open.spotify.com/show/2lJSWBTm

    📺 YouTube - youtube.com/@merillx/podcasts

    🎧 Pocketcast - pca.st/10oii6uv

    🎧 Overcast - overcast.fm/itunes1801200012

    🎧 Other podcast apps (rss) - api.substack.com/feed/podcast/

    Episode 1: entra.news/p/from-okta-to-entr

    #MicrosoftEntra #IdentityManagement #TechPodcast #AzureAD #CloudSecurity

  7. 02-14-2025 MSOnline and AzureAD PowerShell modules.. One last Valentine’s day card each dlvr.it/TJ02dV via PlanetPowerShell #ValentinesDay #MSOnline #AzureAD #PowerShell

  8. Some Graph API fun today.

    The Graph API knows `applications` (learn.microsoft.com/en-us/grap) and `servicePrincipals` (learn.microsoft.com/en-us/grap).

    The Azure Portal knows `App Registrations` and `Enterprise Applications`.

    App Registrations (Portal) = applications (Graph API)
    Enterprise Applications (Portal) = servicePrincipals (Graph API)

    Applications (App Registrations) and servicePrincipals (Enterprise Applications) have a unique, individual `ObjectId` but the ones that belong together hold the same `ApplicationId` which glues them together.

    Fortunately, the Graph API documentation is clear and relatively consistent on what is expected for requesting an object - either the `objectId` or the `applicationId`:

    ```
    GET /servicePrincipals/{id}
    GET /servicePrincipals(appId='{appId}')
    GET /applications/{applicationObjectId}
    GET /applications(appId='{appId}')
    ```

    When searching for servicePrincipals (Enterprise Applications) in the portal, it is not that clear since the terms are mixed up a bit.

    #azure #graphapi #entraid #azuread #MicrosoftGraph

  9. #AzureAD #Entra #EntraID Entra ID Tenant ID & Custom Domains PowerShell Module dlvr.it/TFhVtv via PlanetPowerShell

  10. Abusing Family Refresh Tokens for Unauthorized Access and Persistence in Azure Active Directory - github.com/secureworks/family- #redteam #azuread

  11. Attn Microsoft 365 & Entra ID admins:

    Entra ID Connect Sync service needs to be upgraded to the minimum req'd version of 2.3.2 by Sept 23rd, 2024 to avoid disruption to auto-upgrade & alerting functionality.

    Yes, in 2 weeks. Final warning.

    learn.microsoft.com/en-us/entr

    #entraid #azuread #microsoft365 #microsoft #msftadvocate #entraconnect

  12. What are your biggest Entra (AzureAD) Conditional Access questions or pain points? I'm working on a giant Conditional Access post for the #TrustedSec blog -- would welcome your inputs!
    #Microsoft #Entra #AzureAD #Azure #ConditionalAccess #conditionalaccesspolicies

  13. After 9 years in #azuread / #EntraID CxE I've decided to take on a new role at #Microsoft. I'll be joining the Global Hunting, Oversight and Strategic Triage team, also known as GHOST as a security researcher. I'm excited for the change and very much up for the new challenges in this space. #infosec

  14. 𝐑𝐞𝐦𝐞𝐝𝐢𝐚𝐭𝐞 𝐔𝐬𝐞𝐫 𝐑𝐢𝐬𝐤𝐬 𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐈𝐃 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐓𝐡𝐫𝐨𝐮𝐠𝐡 𝐎𝐧-𝐩𝐫𝐞𝐦𝐢𝐬𝐞𝐬 𝐏𝐚𝐬𝐬𝐰𝐨𝐫𝐝 𝐂𝐡𝐚𝐧𝐠𝐞𝐬

    While we recommend mastering password changes in Entra ID to take advantage of Password Protection, hybrid customers who do password changes on-premises can now use the new setting called "Allow on-premises password change to reset user risk"

    techcommunity.microsoft.com/t5

    #entraid #azuread #azure #idp #identityprotection #passwordchange #passwordprotection #identityrisk #soc #identity #cybersecurity #zerotrust #azureactivedirectory #hybrididentity #hybrid #identityprotection #microsoft #microsoftsecurity

  15. If you've been living under the impression that 100% of all configuration changes in Entra ID are audited or audited to a degree of value... you'd be wrong.

    From a recent bit of analysis in what's in, or, what's not in, Entra ID audit logs, I've written up some findings and thoughts.

    #entra #EntraID #aad #azuread #azureactivedirectory #m365 #mvpbuzz #microsoft #infosec #identitysecurity #azure

    ericonidentity.com/2023/08/29/

  16. Announcing General Availability of Authenticator Lite (in Outlook)

    "Authenticator Lite (in Outlook) expands the opportunity to convert users by bringing the enhanced security of push notifications to devices that have not yet downloaded the Microsoft Authenticator App. "

    techcommunity.microsoft.com/t5

    #microsoft #security #mfa #entra #azuread #azureactivedirectory #authenticatorapp #outlook #phone #azure #microsoftsecurity #identity #idp #authentication #cloud #cloudnative #ios #android #mobile

  17. Azure AD Certificate-Based Authentication (CBA) on Mobile now Generally Available!

    You can now provision certificates on a hardware security key, which can then be used for authentication with Azure AD on iOS and Android devices. Microsoft's mobile certificate-based solution coupled with the hardware security keys is a simple, convenient, Federal Information Processing Standards (FIPS) certified phishing-resistant MFA method. 

    techcommunity.microsoft.com/t5

    #microsoft #azure #security #android #hardware #ios #fido2 #mfa #cba #certificatebasedauthentication #phishing #msal #yubikey #certificate #azureactivedirectory #azuread #iam #nfc #microsoftentra #security #identity #identitysecurity #cloudsecurity #identityprovider

  18. 📢 Find out new Microsoft Entra Features:

    ➡Identity security / protecting Identities

    🔸 Azure AD Recommendations

    🔸 More information on why a sign-in was flagged “unfamiliar”

    ➡Identity modernization

    🔸Converged Authentication Methods

    🔸Granular device management using custom roles

    🔸Azure AD Single-Sign-On enhancements

    🔸Attribute Name format for SAML claims

    🔸Apply RegEx Replace to the group claim content

    🔸Multiple instances of the same application (IDP- and SP-initiated)

    🔸 Persistent NameID for IDP-initiated apps

    🔸AD FS migration advisor in Microsoft 365 admin center

    ➡Identity Governance

    🔸New SCIM connector for ServiceNow

    🔸Provisioning insights workbook

    🔸 Expanding Privileged Identity Management (PIM) role activation across the Azure portal

    ➡Identity for multicloud

    🔸Workload Identity Federation for Managed Identities

    ➡Passwordless

    🔸Multiple Passwordless Phone Sign-in for iOS devices

    techcommunity.microsoft.com/t5

    #microsoft #azure #security #entra #azuread #azureactivedirectory #aad #epm #identity #pim #multicloud #passwordless #ios #saml #servicenow #sso #singlesignon #cloudidentity #governance #identitygovernance #iam #iag #microsoft365 #microsoft365defender

  19. Whether you're fresh to #Azure or #AzureAD, or have been around the block for a while, understanding the tenant to subscription relationship can be a tricky thing.

    In this post we'll try to gain a better understanding with a mix of analogies and visuals.

    #mvpbuzz #aad #azureactivedirectory #azuresecurity #entra #identity

    ericonidentity.com/2023/01/29/

  20. Congrats to the team, 1.2.0 the governance tool is now available! What’s new?

    for Klaw’s UI
    ✅ New look & feel for Browsing topics
    ✅ Support for Authentication

    Get a list of all the new features 👇
    klaw-project.io/releases/relea…

  21. I was asked recently to help provide my experiences with migration from federated to cloud authentication with #AzureAD.

    While I may not work in a consulting role these days, I wanted to share my learnings working with customers, and included some solid community advice.

    #aad #entra #azure #azureactivedirectory #adfs

    ericonidentity.com/2022/12/01/

  22. heise-Angebot: iX-Workshop: Azure AD als zentralen Authentifizierungsdienst einrichten

    Lernen Sie, wie Sie Microsofts Active Directory aus der Cloud als Authentifizierungsdienst einsetzen und mit Azure AD hybride Identitäten sicher verwalten.
    iX-Workshop: Azure AD als zentralen Authentifizierungsdienst einrichten
  23. heise-Angebot: iX-Workshop: Azure AD als zentralen Authentifizierungsdienst einrichten

    Lernen Sie, wie Sie Microsofts Active Directory aus der Cloud als Authentifizierungsdienst einsetzen und mit Azure AD hybride Identitäten sicher verwalten.
    iX-Workshop: Azure AD als zentralen Authentifizierungsdienst einrichten
  24. heise-Angebot: iX-Workshop: Azure AD als zentralen Authentifizierungsdienst einrichten

    Lernen Sie, wie Sie das Active Directory aus der Cloud als Authentifizierungsprovider einsetzen und mit Azure AD hybride Identitäten sicher verwalten.
    iX-Workshop: Azure AD als zentralen Authentifizierungsdienst einrichten