Blog Posts
Today, we will discuss nothing new, but it's still a topic that remains as relevant and important as ever. If you decide to block users working from unmanaged devices, you can securely mitigate various security risks, such as data leaks and successful phishing attacks. For example, we see
Microsoft Entra
Initially, Microsoft introduced the cross-tenant access settings in Microsoft Entra simultaneously with the shared channel feature in Microsoft Teams. Setting up this B2B collaboration between tenants was a requirement for working with these shared channels. Today, many organizations require their users to work from managed and compliant devices before
Microsoft Entra
In short, we can use a break glass (or emergency access) account to regain access to our Microsoft Cloud environment during critical situations where admin access has been lost or is not possible. Examples of situations are: * Multi-factor authentication server outage. * Mistakes while configuring conditional access policies. * Malicious admin
Blog Posts
Some time ago, I had a conversation with my girlfriend (also a Microsoft Consultant) about how to manage secure access for external admins. Probably not your average dinner talk at home. She explained that new customers would create an admin account for her, but she often couldn't sign
Blog Posts
This post is the second part of my favorite conditional access policies to implement. If you haven't read part one yet, you can find it here. In this post, I'm providing a high-level overview of five more conditional access policies to further harden your security
Blog Posts
A bit of light reading today, but still an important topic worth discussing: Conditional Access! If you're not very experienced with implementing these policies, this post might help set you up in the right direction. Conditional access policies are powerful tools for hardening your security posture with, and
Blog Posts
Today, I'm following up on a recent blog post where I talked about how to manage Conditional Access exclusions with PIM. For a similar purpose we are going to utilize the Access Reviews feature, which is part of the Identity Governance solution available in Microsoft Entra. Access Reviews
Blog Posts
Sometimes in our dreams we envision a world without exclusions for Conditional Access policies, only to wake up and realize that this is not yet a reality. Since exclusions can significantly expand the attack surface it's important to manage them effectively. So how can we deal with those
Blog Posts
Why do we need to deal with unmanaged devices, and what are my options? As we all know, times are changing, and employees are working in different ways than they did some years ago. Employees are only sometimes on the corporate network anymore; they work with data in the cloud,