azure ad

Azure Active Directory Identity Governance – Azure AD Entitlement Management

December 20, 2020December 20, 2020
3 Comments
Azure AD, Security
8 min read

In this series, we take a look at Azure Active Directory Identity Governance. This premium feature provides you with all the tools that you need to take and keep control over your (external) identities and access to roles, resources, applications, and groups. In short, Identity Governance gives you three ways to do this: Azure AD Access Reviews (review membership of groups and access to applications) Azure AD Privileged Identity Management (manage time-based and approval-based role activation to protect your resources with just-in-time…

Azure Active Directory Identity Governance – Privileged Identity Management

December 9, 2020December 20, 2020
7 Comments
Azure AD, Security
8 min read

Azure Active Directory Identity Governance – Access Reviews

November 23, 2020December 20, 2020
4 Comments
Azure AD, Security
10 min read

In this series, we take a look at Azure Active Directory Identity Governance. This premium feature provides you with all the tools that you need to take and keep control over your (external) identities and access to roles, resources, applications, and groups. In short, Identity Governance gives you three ways to do this: Azure AD Access Reviews (review membership of groups and access to applications) (This blog post) Azure AD Privileged Identity Management (manage time-based and approval-based role activation to protect your…

License on-demand with Power Automate and Azure AD

October 18, 2020October 22, 2020
5 Comments
Azure AD, Power Platform
8 min read

Most organizations are using group-based licensing in Azure Active Directory. This is often integrated with the onboarding process of the users. But there are some use cases where you have some non-standard licenses attached to your tenant that you hand out on demand. You could still use group-based licensing, but users are added manually to the group. Thinking about that scenario, I came up with a pretty easy method to automate this flow. In short: a user can request a…

Microsoft Secure Score Series – 15 – Do not expire passwords

September 6, 2020September 6, 2020
1 Comment
Azure AD, Secure Score, Security
4 min read

Research has found that when periodic password resets are enforced, passwords become less secure. Users tend to pick a weaker password and vary it slightly for each reset. If a user creates a strong password (long, complex and without any pragmatic words present) it should remain just as strong in 60 days as it is today. It is Microsoft’s official security position to not expire passwords periodically without a specific reason, and recommends that cloud-only tenants set the password policy…

Use Power Automate or Logic Apps to keep an eye on your licenses

June 27, 2020July 25, 2020
74 Comments
Azure AD, Logic Apps, Power Platform
9 min read

I guess we’ve all been there; you ran out of licenses in your Azure AD or Office 365 tenant. Despite you hang out in your admin portal every day, you were still taken by surprise when you discover an issue, caused by a license shortage. More often this is caused by the fact that the people who are responsible to buy these licenses, are not always IT admins. So it’s easy to run out of licenses. Time to get this…

Microsoft Secure Score Series – 09 – Do not allow users to grant consent to unmanaged applications

May 30, 2020October 8, 2020
Azure AD, Secure Score, Security
5 min read

Tighten the security of your services by regulating the access of third-party integrated apps. Only allow access to necessary apps that support robust security controls. Third-party applications are not created by Microsoft, so there is a possibility they could be used for malicious purposes like exfiltrating data from your tenancy. Attackers can maintain persistent access to your services through these integrated apps, without relying on compromised accounts. Today we take a look at a serious problem in the modern IT…

Use Graph API data in Power BI using Logic Apps

May 9, 2020December 23, 2020
17 Comments
Azure AD, Logic Apps, Power BI, Power Platform
8 min read

Some things in the modern connected world seem so common that you just assume it’s possible by nature. Getting your Microsoft Graph API data into Microsoft Power BI for example. That must be easy peasy right? Well…. When I start looking for ways to do this, I assumed there was a builtin connector available in Power BI that I could use. Guess what? There is not (yet). There is a connector for the Microsoft Security Graph, but that one “only”…

What admins should know about the combined registration portal for Azure MFA and Self Service Password Reset

May 2, 2020November 18, 2022
10 Comments
Azure AD, Security
9 min read

The (long) title pretty much reveals the purpose of this blog post. This one was on my to-do list for a while now, and now the combined registration portal is General Available, the time was there. In my previous MFA-related blogs, I always encouraged my readers to turn on the combined registration portal, even when it was in public preview. But if you start using this portal, there are quite some settings that can change the user experience of the…

Use Power Automate for your custom “dynamic” groups

April 1, 2020July 10, 2020
21 Comments
Power Platform
11 min read

Azure AD Dynamic Groups Dynamic groups in Azure AD are awesome. I use them a lot. Dynamic groups can create groups based on attributes. For example, you can create a group that includes all the users from the Sales Team. The query for the group would look like this: If a new user comes along with the same attribute, the user will automatically be added to this group. This can be really helpful for onboarding. You can pick a lot…