Microsoft Entra ID

Last year, Microsoft introduced the public preview of a system-preferred multifactor authentication (MFA) for Azure Active Directory (Azure AD). The company announced yesterday that the feature is now generally available for all commercial customers. What is system-preferred MFA authentication? With system-preferred authentication enabled, Azure AD evaluates all authentication methods registered for a user account, and…

Microsoft has recently introduced Token Protection for sign-in sessions support for its Azure AD Conditional Access service. The new feature is designed to help organizations protect their critical resources against token theft. Last fall, Microsoft’s Detection and Response Team (DART) reported an increase in adversary-in-the-middle (AitM) phishing attacks to compromise organizational resources. This technique allows…

Microsoft has recently released several new security tools and features for its Microsoft Entra product family. These updates are designed to help organizations improve their security posture and protect against sophisticated cyber-attacks. “With the ever-increasing sophistication of cyber-attacks and the increasing use of cloud-based services and the proliferation of mobile devices, it is essential that…

Last year, Microsoft released a public preview of Azure Active Directory certificate-based authentication (CBA) on mobile. The company announced yesterday that Azure AD CBA support is now generally available on iOS and Android devices. The new security solution allows IT admins to provision certificates with a hardware security key for authentication on mobile devices. The…

Last week, Canonical announced the release of Ubuntu 23.04. The latest version of its Linux distribution includes improved Azure Active Directory support, a new desktop installer, and other enterprise-focused features. Codenamed Lunar Lobster, Ubuntu Desktop 23.04 provides native user authentication with Azure Active Directory (Azure AD). This release enables Microsoft 365 enterprise customers to authenticate…

Microsoft has introduced a new feature that allows customers to configure an app instance property lock for Azure AD enterprise applications. The new capability helps organizations prevent attackers from making any changes to sensitive properties of multi-tenant application objects. OAuth is a security protocol that enables users to share information about their accounts with third-party…

Microsoft has started rolling out a new system-preferred authentication policy in preview for Azure AD customers. The feature enables the system to evaluate which authentication method should be used when a user signs in to Azure AD. With system-preferred authentication, Azure AD will check all authentication methods registered for an account and only show the…

Azure Virtual Desktop (AVD) is a Platform-as-a-Service (PaaS) to provide access to Windows 10 and Windows 11 desktops and applications virtually anywhere. It’s a solution hosted by Microsoft, which makes it secure by design, even though there is a lot of responsibility on the customer to ensure services are secure. In this article, I will…

Microsoft has announced that it’s bringing Internet Protocol version 6 (IPv6) support to its Azure Active Directory services. The company plans to roll out IPv6 support to all enterprise customers in a staggered manner on March 31. With this release, users will be able to access Azure Active Directory (AD) services through IPv6, IPv4, or…

Organizations adopting Microsoft’s cloud services need to keep their employees safe, especially when employees need to access these cloud services while being outside of the organization’s network. In this guide, we’ll explain how organizations can set up Conditional Access policies to restrict how their users can access Office 365 and other Microsoft services. What are…