Azure AD Identity Protection

Microsoft Secure Score Series – 15 – Do not expire passwords

September 6, 2020September 6, 2020
1 Comment
Entra, Secure Score, Security
4 min read

Research has found that when periodic password resets are enforced, passwords become less secure. Users tend to pick a weaker password and vary it slightly for each reset. If a user creates a strong password (long, complex and without any pragmatic words present) it should remain just as strong in 60 days as it is today. It is Microsoft’s official security position to not expire passwords periodically without a specific reason, and recommends that cloud-only tenants set the password policy…

Use Microsoft Graph Security for end-user notifications

August 19, 2020August 19, 2020
3 Comments
Logic Apps, Power Platform, Security
5 min read

In this short blog post, I want to show how you can use the Microsoft Graph Security to send alerts and notifications to your end-users. I also want to show you that it is super easy to set up. All you need is: Power Automate or Logic Apps Microsoft Graph Security Connector (premium) Microsoft Teams or Email connector to send the messages One of the (Microsoft) security products to work with like Cloud App Security or Identity Protection Microsoft Graph…

Bulk dismiss risky users with Power Automate or Logic Apps

August 6, 2020October 16, 2020
3 Comments
Entra, Logic Apps, Power Platform, Security
4 min read

Update 08-10-2020: Microsoft released an official connector for Azure AD Identity Protection. This would be much easier to use, since you don’t have to create a service principal to authenticate the custom connector. However, at the time of writing the official connector does not have the action to get all the risky users. Will keep an eye on things. This blog was inspired by an Azure AD Mailbag blog about Azure AD Identity Protection. In the article, Microsoft provided a…

Close the gap. Azure AD Identity Protection & Conditional Access.

July 14, 2020February 15, 2021
6 Comments
Entra, Security
8 min read

This blog is about Azure AD Identity Protection and Conditional Access, and how these two features are working together. This is not my first article on this subject. (neither my last) In previous blogs, I covered the sign-in risk and user risk policies as part of the Secure Score Series, and in my blog, about Azure Multifactor Authentication I talked about Azure AD Identity Protection, and how it can be used to roll out MFA in your organization. Microsoft released…

Microsoft Secure Score Series – 11 – Turn on user risk policy

June 8, 2020June 23, 2020
6 Comments
Entra, Secure Score, Security
5 min read

With the user risk policy turned on, Azure AD detects the probability that a user account has been compromised. As an administrator, you can configure a user risk conditional access policy to automatically respond to a specific user risk level. For example, you can block access to your resources or require a password change to get a user account back into a clean state. Today, we take a look at Azure AD Identity Protection. More specifically, the ability to take…

Microsoft Secure Score Series – 07 – Turn on sign-in risk policy

April 13, 2020June 6, 2020
2 Comments
Entra, Secure Score, Security
4 min read

Turning on the sign-in risk policy ensures that suspicious sign-ins are challenged for multi-factor authentication. Azure AD Identity Protection is powerful in many ways. As discussed in my previous post about Multi-factor Authentication, you can use IdP to onboard your user for MFA. Once you’ve had all your users registered, it’s time to tighten your security by prompting for MFA when a sign-in is risky. This improvement action wants you to turn on the sign-in risk policy in Azure Identity…