Das heise security Webinar: Gefährliche Voreinstellungen der Microsoft-Cloud
Microsoft Entra ID kommt mit gefährlichen Defaults. Wir zeigen, wo man unbedingt nachbessern muss. Und bis Mittwoch gibts das Webinar noch 20 Prozent reduziert.
Bringing Artificial Intelligence to Entra ID Conditional Access
The Conditional Access Optimization Agent is one of 6 Security Copilot agents unveiled by Microsoft on March 24, 2025. The idea is that the agent can optimize CA policies by observing the connectivity behavior within a tenant. The agent can suggest how to fill gaps in CA coverage, detect new users and apps, and generally be helpful. Is it worth it? Experience will tell…
https://office365itpros.com/2025/04/04/conditional-access-optimization/
#EntraID
It’s great to see @merill has launched his #podcast! It’s been fun listening to!
If you work in #entraid , or just like hearing about #iam - give it a listen.
https://podcasts.apple.com/gb/podcast/entra-chat/id1801200012
Blogged: ASP.NET Core delegated Microsoft OBO access token management (Entra only)
iX-Workshop: Effektive zentrale Authentifizierung mit Entra ID
Erfahren Sie, wie Sie Entra ID als Cloud-basierten Authentifizierungsdienst einsetzen und hybride Identitäten sicher verwalten.
Practical Graph: Nag Users to Upgrade to a Strong Authentication Method
Convincing people to use MFA is one challenge. Convincing them to use a stronger authentication method than SMS is another. This article explains how to use PowerShell to find people still using SMS for MFA and send email to ask them to upgrade their authentication method.
https://practical365.com/upgrade-stronger-authentication-method-mfa/
#Microsoft365 #EntraID
iX-Workshop: Angriffe auf Entra ID abwehren
Lernen Sie, wie Sie Entra ID einschließlich Azure-Diensten härten und effektiv vor Angriffen schützen.
Security-Webinar mit Frühbucherrabatt: Microsoft Entra ID – Dangerous Defaults
Microsofts Cloud-Angebote in Betrieb zu nehmen ist einfach – sie sicher zu betreiben, nicht. Wir erklären, wo und warum man unbedingt Hand anlegen muss.
If you have access to manage #EntraID in your org, make sure the User Settings > #LinkedIn option is disabled. Else you’re giving away your company’s data and making an enemy of your Privacy team. This is ridiculous #Microsoft, you should be ashamed.
iX-Workshop: Effektive zentrale Authentifizierung mit Entra ID
Erfahren Sie, wie Sie Entra ID als Cloud-basierten Authentifizierungsdienst einsetzen und hybride Identitäten sicher verwalten.
Blogged: Use client assertions in OpenID Connect and ASP.NET Core
https://damienbod.com/2025/02/24/use-client-assertions-in-openid-connect-and-asp-net-core/
Practical Graph: Exploring the Best Way to Control User Access to Entra ID Apps
Most Microsoft 365 tenants have a collection of Entra ID apps to manage. One task might be to control access to Entra ID apps, so the question is how best to do this. Assignments for users and groups control the ability to use apps while custom app roles are there for developers to determine what a user can done when they run an app.
https://practical365.com/access-to-entra-id-apps/
#EntraID #Microsoft365
Really interesting article on this ransomware operators tactics, this part especially so:
“Early Warnings Suggest Entra Connect Is Next Target”
I think it’s worth your time to harden your Microsoft #EntraID Connect (formerly Azure AD Sync) configuration as this is not the first article I’ve seen noting attackers targeting your IAM infrastructure. #cybersecurity
From: @nopatience
https://swecyb.com/@nopatience/114023912775060407
At this point, most organizations don’t need the old Azure AD Seamless SSO configuration as they use the more modern Entra ID Native or Hybrid join features. AFAIK the Seamless SSO feature was used to support Windows 8 and 2012 systems. If you don’t have any of those, you should be ok to disable this vulnerable feature. Here’s some documentation on how to do so:
#cybersecurity #EntraID #microsoft
From: @r1cksec
https://infosec.exchange/@r1cksec/114019481650636237
If you are into #entraID and #iam - i highly recommend the https://entra.news/ #newsletter
@merill and Joshua do an amazing job at getting the latest news, tips, podcasts and content together in an easy to read and follow format.
How to Use Bulk User Operations in Entra Admin Center
A new preview option in the Entra admin center supports the ability to update multiple Entra ID accounts. You can update properties, add managers and sponsors, update group membership, revoke account access, and so on. The only surprising thing about the new option is that it’s taken Microsoft so long to add it to the admin center.
https://office365itpros.com/2025/02/12/update-multiple-entra-id-accounts/
#Microsoft365 #EntraID
iX-Workshop: Angriffe auf Entra ID abwehren
Lernen Sie, wie Sie Entra ID einschließlich Azure-Diensten härten und effektiv vor Angriffen schützen.
Use Protected Actions to Stop Attackers Hard-Deleting Entra ID Accounts
An article about the horrible devastation that an attacker can wreak inside a compromised Microsoft 365 tenant highlighted how protected actions can help by preventing attackers from being able to permanently remove user accounts unless they can pass additional authentication tests. Protected actions won’t stop attackers that have complete control over a tenant, but it might irritate them!
https://office365itpros.com/2025/02/11/entra-id-protected-action/
#EntraID #Microsoft365
Is 'Get Manager (V2)’ failing you again? If a user has no manager, your flows crash! Time to switch to a new boss– Microsoft Graph API! The smarter, stress-free way to find your managers! #PowerPlatform #Power Automate #MicrosoftGraph #Automation #Microsoft365 #EntraID
http://elliskarim.com/2025/02/09/fire-get-manager-v2-in-power-automate-graph-api-is-the-new-boss/