Azure

Microsoft Secure Score Series – 07 – Turn on sign-in risk policy

April 13, 2020June 6, 2020
2 Comments
Entra, Secure Score, Security
4 min read

Turning on the sign-in risk policy ensures that suspicious sign-ins are challenged for multi-factor authentication. Azure AD Identity Protection is powerful in many ways. As discussed in my previous post about Multi-factor Authentication, you can use IdP to onboard your user for MFA. Once you’ve had all your users registered, it’s time to tighten your security by prompting for MFA when a sign-in is risky. This improvement action wants you to turn on the sign-in risk policy in Azure Identity…

Microsoft Secure Score Series – 05 – Enable self-service password reset

March 30, 2020June 6, 2020
2 Comments
Entra, Secure Score, Security
10 min read

With self-service password reset in Azure AD, users no longer need to engage helpdesk to reset passwords. This feature works well with Azure AD dynamically banned passwords, which prevents easily guessable passwords from being used. In this blog post, we are going to take a look at Self Service Password Reset in Azure AD. Self Service Password Reset allows your users to quickly unblock their account without the help of IT staff or helpdesk. For readability, I use SSPR for…

Secure your Azure Management portal

February 16, 2020June 16, 2020
3 Comments
Security
2 min read

Today a quick tip to secure your Azure Management Portal. By default, the inactivity timeout of the Azure Management portal is set to ‘Never’. From a security perspective, this is far from ideal. This small setting can be easily overlooked. It’s a good idea to configure this for your tenant. Administrators can set this value themselves. Global administrators are able to set this value globally. When configuring this setting, your administrators will be logged out when they are inactive for…