Azure Active Directory

Microsoft today announced the release of Azure AD Certificate-based authentication (CBA) on mobile devices. As of today, YubiKey is the only external device that provides CBA support on iOS and Android to protect organizations against phishing attacks. Microsoft announced the public preview of Azure AD certificate-based authentication (CBA) back in February for desktop users. It’s…

Microsoft has added support for application filters to Azure AD conditional access (CA) policies. This release enables organizations to use an app filter based on custom security attributes to restrict access to specific applications. Currently, it’s possible for IT admins to apply conditional access policies to individual or all apps. However, this process may prove…

Microsoft has released a new setting for conditional access policies that enables organizations to define the authentication strength of accepted connections. This release brings the ability to specify a combination of multifactor authentication (MFA) methods that allow external users to access a particular resource. Conditional access policies let IT admins create a set of rules…

Very Useful Sensitivity Labels Microsoft has steadily been building out the ability of sensitivity labels to manage different aspects of containers (teams, groups, and sites), with the ability to control the external sharing capability for SharePoint Online team sites the latest addition (Figure 1). Image 1 Expand Figure 1: Defining external sharing capability in a sensitivity…

AAD Basic edition is ‘going away’ because it is low volume and confuses customers.

Cloud Discovery, Application Proxy, passwordless authentication, and more Azure Active Directory features coming to Microsoft 365 Business in April.

Microsoft has announced the general availability of new Azure AD cross-tenant collaboration settings. The feature was first announced back in February, and it lets IT Pros control how end users can securely collaborate with external organizations. With this release, IT administrators can access the new settings in the External identities section of the Azure AD…

Microsoft has released an update that blocks the use of unmanaged Azure AD accounts in organizations. The company has provided a set of tools to help IT admins find existing unmanaged accounts and reset their redemption status. In 2016, Microsoft introduced a self-service sign-up feature that allowed external users to sign up as guest members…

Cybersecurity company Mandiant has discovered that hackers are using a new technique to target enterprise networks. The researchers warned that threat actors exploit multifactor authentication (MFA) to gain unauthorized access to dormant Microsoft accounts. According to cybersecurity researchers at Mandiant, the exploit is being used in hacking campaigns by APT29 to bypass authentication. APT29 is…

Microsoft has announced that its Entra Verified ID service is now generally available for commercial customers. The new decentralized identity offering enables organizations to easily create, issue, and verify the credentials of users to provide proof of education, employment, and other claims. “Microsoft’s Microsoft Entra Verified ID (Azure AD VC) service enables you to trust…