Category: Azure B2B

Section 15 – Plan and Implement an Identity Governance Strategy – Plan, implement and manage access reviews

Next section to my SC-300 study guide will cover the following: plan for access reviews create access reviews for groups and apps monitor access review findings manage licenses for access reviews automate access review management tasks configure recurring access reviews…

Continue Reading Section 15 – Plan and Implement an Identity Governance Strategy – Plan, implement and manage access reviews

Section 14 – Plan and Implement an Identity Governance Strategy – Plan and implement entitlement management

Next section to my SC-300 study guide will cover the following: define catalogs define access packages plan, implement and manage entitlements implement and manage terms of use manage the lifecycle of external users in Azure AD Identity Governance settings What…

Continue Reading Section 14 – Plan and Implement an Identity Governance Strategy – Plan and implement entitlement management

Section 13 – Implement Access Management for Apps – Implement app registrations

Getting to the end, slowly but surely. In this section covering the following: plan your line of business application registration strategy implement application registrations configure application permissions implement application authorization plan and configure multi-tier application permissions What is App registration…

Continue Reading Section 13 – Implement Access Management for Apps – Implement app registrations

Some of my personal favorites for auditing Microsoft environments

Professionals are always finding out ways to report M365 or Azure environments, automating activities or remediating threats. There is insane amount of content available to achieve these goals but I want to list some of my favorites in this post….

Continue Reading Some of my personal favorites for auditing Microsoft environments

Cross-tenant access settings and Teams connect shared channels

Teams have some excellent solutions for collaborating but one big annoying things has been switching the accounts when You need to access another tenant. Microsoft release Shared channel and it’s currently in public preview after it was announced in late…

Continue Reading Cross-tenant access settings and Teams connect shared channels

Section 3 – Implement an Identity Management Solution – Implement and manage external identities – Azure AD and IdP

And we reached section 3 on my Study guide, in this section I will cover the following: manage external collaboration settings in Azure Active Directory invite external users (individually or in bulk) manage external user accounts in Azure Active Directory…

Continue Reading Section 3 – Implement an Identity Management Solution – Implement and manage external identities – Azure AD and IdP

Multi-stage access review (preview)

Microsoft introduced a feature to allow Multi-stage Access reviews. In this post I will cover what the feature is about. So why and what is needed? First You need a valid Azure AD Premium (P2) license for each person, other…

Continue Reading Multi-stage access review (preview)

Cross-tenant access settings (Preview)

Cross-tenant access settings in now in preview. You can use cross-tenant access settings to manage collaboration with external Azure AD organizations but for non-Azure AD organizations, use collaboration settings. https://portal.azure.com/#blade/Microsoft_AAD_IAM/AllowlistPolicyBlade What is Cross-tenant access? External Identities cross-tenant access settings to…

Continue Reading Cross-tenant access settings (Preview)

Section 3 – Manage application access – App Registrations

This is section 3 and part 2. In this post I will be covering App registrations with the following topics. Create an App Registration Configure App Registration permission scopes Manage App Registration permission consent What is App registration in Azure?…

Continue Reading Section 3 – Manage application access – App Registrations

Multi-tenant App registration and user (Admin) consent

What has changed? Microsoft have removed ability for getting user consent for unverified applications. This is an great addition towards security but it will make your life harder as a admin and as a software publisher. Different options Let’s go…

Continue Reading Multi-tenant App registration and user (Admin) consent