Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths.
As you may or may not know, most FIDO2 security keys can be set up with easy PINs like 1111 or 123456. Just like passwords, users tend to come up with…
Tag
Mfa
Manage user-preferred multi-factor authentication method in Microsoft Entra ID
This post is all about setting the preferred multi-factor authentication method using Graph API. We already know the system-preferred multi-factor…
Send an email on a new Azure MFA method registration
I've done quite some Azure MFA projects over time (and counting), and as we mainly focus on the technical side, there are also practical sides to consider.…
Report Suspicious Activity & Fraud Alert for Azure MFA
A new feature popped up in Azure AD. Well, not entirely new, I must say. Reading from the docs, Report Suspicious Activity is an enhancement of the Fraud Alert…
Authenticator Lite - Approve Azure MFA prompts with the Outlook app
Microsoft released a new feature where the Outlook mobile app now has some of the Microsoft Authenticator App features onboard. Users can now enroll for Azure…
System-preferred multifactor authentication in Azure AD. Don't settle for less.
A new feature has popped up in Azure AD: System-preferred multifactor authentication (MFA). This will allow administrators to enforce the most secure method…
Azure MFA authentication method analysis. Share the results with Power Automate!
You might have seen the sample script, created by the Microsoft community, to run some analysis on your Azure MFA authentication methods. This script can be…
Prepopulate phone methods using a Custom Connector in Power Automate
In the previous blog post of this series, I've shown you the use of the Graph API and how you could manually populate the phone methods for your users. Today,…
Prepopulate phone methods for MFA and SSPR using Graph API
What is the number one task if we want to protect our identity? Right. Turn on MFA.What is the number one task our helpdesk is busy with all day (and night)?…
A first look at Administrative Units and My Staff in Azure Active Directory
Recently, Microsoft introduced Administrative Units in Azure Active Directory. At the time of writing, this feature is in preview. Today we take a first look…
Sure, keep me signed in! And don't prompt for MFA!
Today a short blog about MFA prompts, session lifetime, and cookies. This will give you an idea of how you can tune the end-user experience and where to…
What admins should know about the combined registration portal for Azure MFA and Self Service Password Reset
The (long) title pretty much reveals the purpose of this blog post. This one was on my to-do list for a while now, and now the combined registration portal is…