Azure AD

Review guest access across Microsoft 365 groups (teams)

March 7, 2021March 7, 2021
3 Comments
Azure AD
5 min read

In a previous blog post I wrote about Azure AD Access Reviews, and how they can help you in various use-cases. One of them is taking control over your guest accounts in Azure AD. You can select Microsoft 365 groups (or teams if you will) to review the current guest users. Microsoft released a new feature within Access Reviews to select all Microsoft 365 groups with guest users. Using this method, you don’t have to create an access review for…

Azure Active Directory Temporary Access Pass

February 21, 2021February 22, 2021
4 Comments
Azure AD, Security
6 min read

This blog post is all about the new Temporary Access Pass in Azure Active Directory. At the time of writing, this feature is not officially announced, but the policy, settings, and API are now available. Time to dive in for some first experiences. What is a Temporary Access Pass? As the documentation states, a Temporary Access Pass (TAP) is a time-limited passcode that serves as a strong credential and allows the onboarding of passwordless credentials. This is a big step…

Privileged Identity Management Discovery and insights

February 12, 2021February 12, 2021
2 Comments
Azure AD, Security
5 min read

Privileged Identity Management (PIM) in Azure Active Directory is getting more and more popular. But how do you get started? Like any successful project, it all starts with a good inventory of the current situation. You need to identify the problem before it can be resolved. The problem we are talking about is standing access to high privilege roles. If you are not familiar with PIM, please check out this blog post first. Discovery and insights, formerly known as Security…

Number matching with Microsoft Authenticator App in Azure MFA

February 9, 2021February 9, 2021
4 Comments
Azure AD, Security
4 min read

Number matching and passwordless phone sign-in. I was used to it for a couple of months already because this feature was previously launched for personal Microsoft accounts like Outlook or Hotmail. It’s now available (preview) in Azure AD to use with your work or school account. When this feature is enabled, users are asked to match the number in the sign-in screen with the number in the Authenticator app. After that, the user needs to authenticate through PIN or biometric…

Self Service in Microsoft 365

January 16, 2021January 16, 2021
2 Comments
Azure AD
9 min read

One of the great things about Azure Active Directory is the capability of self-service. Maintaining security groups can be a laborious and cumbersome task to do. The same applies to resetting passwords, handing out licenses, permissions, applications, and privileged roles. What if I told you that you can delegate most of these tasks to your end-users, their managers, or product-and application owners? In this blog post, I will show you the built-in capabilities of self-service in Azure Active Directory, which…

Enrich Microsoft 365 profile card with extensions and custom attributes

January 8, 2021January 8, 2021
21 Comments
Azure AD
6 min read

Microsoft 365 is equipped with a very nice, but underestimated feature: Profile cards. I’m sure you know Microsoft Delve, and how it can enrich your Office 365 profile with relevant information such as hobbies, working hours, skills, and your birthday. Next to that, you can find information about recent projects, and the people that you worked with. All this information and insights are getting more and more integrated with the profile card feature. You can find the profile card in…

Azure Active Directory Identity Governance – Azure AD Entitlement Management

December 20, 2020December 20, 2020
3 Comments
Azure AD, Security
8 min read

In this series, we take a look at Azure Active Directory Identity Governance. This premium feature provides you with all the tools that you need to take and keep control over your (external) identities and access to roles, resources, applications, and groups. In short, Identity Governance gives you three ways to do this: Azure AD Access Reviews (review membership of groups and access to applications) Azure AD Privileged Identity Management (manage time-based and approval-based role activation to protect your resources with just-in-time…

Azure Active Directory Identity Governance – Privileged Identity Management

December 9, 2020December 20, 2020
7 Comments
Azure AD, Security
8 min read

Azure Active Directory Identity Governance – Access Reviews

November 23, 2020December 20, 2020
4 Comments
Azure AD, Security
10 min read

In this series, we take a look at Azure Active Directory Identity Governance. This premium feature provides you with all the tools that you need to take and keep control over your (external) identities and access to roles, resources, applications, and groups. In short, Identity Governance gives you three ways to do this: Azure AD Access Reviews (review membership of groups and access to applications) (This blog post) Azure AD Privileged Identity Management (manage time-based and approval-based role activation to protect your…

License on-demand with Power Automate and Azure AD

October 18, 2020October 22, 2020
5 Comments
Azure AD, Power Platform
8 min read

Most organizations are using group-based licensing in Azure Active Directory. This is often integrated with the onboarding process of the users. But there are some use cases where you have some non-standard licenses attached to your tenant that you hand out on demand. You could still use group-based licensing, but users are added manually to the group. Thinking about that scenario, I came up with a pretty easy method to automate this flow. In short: a user can request a…