Today, for its April 2021 Patch Tuesday, Microsoft released an important security update for the Azure AD web sign-in feature in Windows and Windows Server. This vulnerability is known as CVE-2021-27092 and rated with CVSSv3.0 scores of 6.8/5.9. About Azure AD Web Sign-in Web Sign-in is a new way of signing into a Windows system. … Continue reading "Azure AD Web Sign-in Security Feature Bypass Vulnerability (CVE-2021-27092, Important)"
Applications in Azure AD offer people access to functionality that is integrated into your Azure AD tenant. The default behavior in Azure AD is that everyone can register applications and grant access to their data to applications. Microsoft now offers functionality to streamline the process of application management. When onboarding to this new functionality, admins … Continue reading "HOWTO: Get an overview of Azure AD Application Permissions"
Azure Active Directory is Microsoft's Identity Management-as-a-Service solution, offering seamless access, easy collaboration, efficiency in IT processes and improved security and compliance. In its Release Notes for Azure Active Directory, Microsoft communicated the following planned, new and changed functionality for Azure Active Directory for March 2021: What’s Planned Guidance on how to enable support for … Continue reading "What's New in Azure Active Directory for March 2021"
As announced by Nadim Abdo on December 18th, 2020, Azure Active Directory has an updated public service level agreement (SLA) to promise 99.99% uptime per April 1st, 2021. April Fools' joke? I deliberately didn’t share this news on April 1st, 2021, to make sure that people didn’t see the blogpost as an April Fools’ … Continue reading "Azure Active Directory now offers a 99,99% uptime SLA"
Organizations flocking to Microsoft 365 services like Exchange Online, SharePoint Online and Teams have many reasons to make this transition. Reasons to transition to the Microsoft cloud Whether it’s upgrading the IT real estate to the 21st century, the desire to eliminate technical debt, avoiding the upfront cost of a renewed on-premises implementation, or … Continue reading "Microsoft 365 Backup in terms of your organization’s exit scenario"
In Azure AD Connect version 126.96.36.199, Microsoft introduced the Selective Password Hash Synchronization feature. Formerly, Azure AD Connect would apply Password Hash Synchronization to all objects in scope for synchronization. In Azure AD Connect version 188.8.131.52, and up, a subset of users can be specifically included or excluded to having their password hashes synchronized to … Continue reading "Four things you should know about Selective Password Hash Synchronization"
Setting up an AD FS Farm with Azure AD Connect is easy when you use Azure AD Connect. Its configuration wizard is able to configure all the required AD FS settings and Web Application Proxy settings on two domain-joined servers you point the wizard to. This begs the question: How do you extend the AD … Continue reading "Adding an AD FS Server to an existing Farm using Azure AD Connect"
When Active Directory on-premises and Azure AD work together, it’s called Hybrid Identity. Hybrid Identity is relatively easy to setup, when you use the Express Settings for Azure AD Connect. However, setting up Hybrid Identity with Active Directory Federation Services (AD FS) is not that hard either. I’ll show you how to achieve this goal … Continue reading "Setting up Hybrid Identity with AD FS through Azure AD Connect"
Microsoft offers a page that describes how to setup an Azure Active Directory tenant. However, I feel this way isn’t always the most obvious way to start with Azure Active Directory. In this blogpost, I’ll explain two alternative ways you can get started with your own Azure AD tenant, what you need per registration method … Continue reading "Two alternative ways to get started with Azure Active Directory"
Roughly a year ago, I wrote a blogpost on the ten things you need to know about Azure AD Connect Cloud Provisioning. At that time, the agent was in public preview. Today, I want to talk about the renamed product: Azure AD Connect Cloud Sync, because I feel there’s a couple of things you should … Continue reading "Ten things you should know about Azure AD Connect Cloud Sync"