As you know Azure Active Directory Connect (AAD Connect) is used to synchronize your on-premises Active Directory objects (users, groups, devices) to Azure AD with the option to synchronize the user’s hash password (aka password sync, aka password hash sync, aka PHS). Well, with this new version – 1.6.2.4 – available for download here https://go.microsoft.com/fwlink/?LinkId=615771 […]
As you know, Azure Active Directory provides a large list of administration roles to allow delegating administration tasks and reduce the need to grant the more powerful global administrator role. Well, 2 new roles are now available: Authentication policy administrator to delegate the permissions to manage the authentication methods enabled on Azure AD and associated
As you know, you can register applications on Azure AD when your application need to have access to data hosted on Azure AD (groups membership, users profile details…). Well, you can now recover a deleted registered application up to 30 days after deletion. This can be useful when an Azure AD administrator and/or application administrator/developer
Azure AD – You can now recover a deleted registered application (preview) Read More »
As you know, for the past few years, Microsoft has been working to remove the need of passwords to access Microsoft Cloud services through Azure Active Directory – also known as password less. Well, there was still a problem as an end user needed to know his password at some point. This now answered with
Azure AD – Temporary Access Pass for password less user is now in preview Read More »
Good news, you don’t need to be a global administrator to manage Multi Factor Authentication (MFA) or authentication methods. A new role called Authentication Policy Admin allows you to delegate authentication methods management, covering MFA or password protection policies. NOTE the legacy MFA setting is not available for the authentication policy admin role Below is
Azure AD – New administration roles for managing domain name and authentication methods Read More »
As you may know, Azure AD has been allowing to generate a one time password and sent it by email for external (guest) users for some time (2019 – see https://t.co/5H7QBhEa3D) This feature was in preview and is now GA. It will be turn on automatically for any tenant which did not have enabled it
Azure AD – Emailed One Time Password will be turned on for B2B Read More »
As many customer, you may be running resources on multiple cloud providers, like Azure and AWS. You can now use Azure AD (and the additional AAD capabilities like conditional access and/or MFA) for authentication when accessing AWS console. With this integration you will also be able to provision AWS roles to your Azure AD. The
AWS/Azure AD – You use Azure AD for authentication when accessing AWS Read More »
As you know, password attacks have been there for quite some time. Well, if you are using Azure AD Identity Protection to help you secure your accounts, you now have the ability to have report on the specific password spray attack from the Risk Detection. You need to use Azure AD P2 to be able
Azure AD – Get Password spray attack detection report when using Identity Protection Read More »
This new capability is simplifying switching between Azure Active Directory tenant. This is quite useful if you manage more than 1 AAD tenant – like CSP or if you are using Azure B2C. To use this is new feature, logon to your Azure AD portal (https://aad.portal.azure.com) or Azure portal (https://portal.azure.com) and access the Azure Active
Azure AD – You can now easily switch to another AAD tenant Read More »
It has been a long awaited capability: you can now download the list of your Azure AD devices directly from the Azure AD portal. Before this feature you were able to get the list of your Azure AD devices only using Azure AD PowerShell. To download the list of your Azure AD devices from the
Azure AD – You can download the list of Azure AD Devices Read More »
