Authentication on JanBakker.tech

Prepare for passkeys in Entra ID!

Sun, 22 Oct 2023 13:27:28 +0000

Only a few months until Microsoft Entra ID will support device-bound passkeys stored on computers and mobile devices as an authentication method in preview, in addition to the existing support for FIDO2 security keys. This enables your users to perform phishing-resistant authentication using the devices that they already have.

Manage user-preferred multi-factor authentication method in Microsoft Entra ID

Tue, 11 Jul 2023 18:58:26 +0000

This post is all about setting the preferred multi-factor authentication method using Graph API. We already know the system-preferred multi-factor authentication method, where Microsoft Entra ID will use the strongest method of all the registered methods, but this time we take a look a the default method set by the user.

Authenticator Lite - Approve Azure MFA prompts with the Outlook app

Tue, 14 Mar 2023 12:28:09 +0000

Microsoft released a new feature where the Outlook mobile app now has some of the Microsoft Authenticator App features onboard. Users can now enroll for Azure MFA using just their Outlook mobile app. No additional installation of the Microsoft Authenticator app is needed. This preview brings both push notifications and TOTP to the Outlook mobile app. Users are prompted for enrollment or can manually register their app to work with a Microsoft 365 account once this feature is enabled.

System-preferred multifactor authentication in Azure AD. Don't settle for less.

Fri, 03 Mar 2023 14:39:38 +0000

A new feature has popped up in Azure AD: System-preferred multifactor authentication (MFA). This will allow administrators to enforce the most secure method for Azure MFA. For example, if a user has multiple methods registered, the most secure method will be prompted first. How do I know what method is the strongest, you may ask? Here is the current order from most to least secure methods, currently supported in Azure Active Directory:

What admins should know about the combined registration portal for Azure MFA and Self Service Password Reset

Sat, 02 May 2020 12:06:20 +0000

This post is outdated. There is a new way to manage authentication methods#

Learn more

The (long) title pretty much reveals the purpose of this blog post. This one was on my to-do list for a while now, and now the combined registration portal is General Available, the time was there. In my previous MFA-related blogs, I always encouraged my readers to turn on the combined registration portal, even when it was in public preview. But if you start using this portal, there are quite some settings that can change the user experience of the registration. And that’s mainly what this blog post is about. Let’s see how each setting reflects to the end user.

Microsoft Secure Score Series – 06 – Enable policy to block legacy authentication

Wed, 08 Apr 2020 19:15:37 +0000

In this series, I’ll be covering the Microsoft Secure Score improvement actions. Although Microsoft does a great job on telling you what to do, some actions have a much bigger impact and need to be balanced against business needs. Some actions might not even have value for your organization. In the end, Microsoft Secure Score is meant to strengthen your security, not a contest to reach the highest score possible. In this series, I’ll pick out random actions and try to make it as simple as possible, backed with notes from the field.