ADCONNECT – Migration between domains with a single Tenant
Hello everyone, guys I have the following scenario. Domain A with Adconnect synchronizing users with Tenant.The need came to migrate users to a new B domain. This new domain…
06/12/2023
Using groups to assign admin roles – works great except…
About a year ago we migrated our internal processes to using Entra ID security groups to manage Entra ID role assignment. It is mostly a good solution, but over time we started finding issues that Microsoft either can’t or is unwilling to fix. Their “solution” is always to “assign the…
23/08/2024Microsoft Entra (Azure AD)
You may be interested in
Idle Session Timeout policy for Entra ID – Enterprise applications
Hi All, I would like to understand the limitations of having Idle session timeout policies for Enterprise applications in Entra ID. Although we do have Session based sign-in CAP…04/10/2024Conditional Access and Edge Sync
We have an CA policy for users with admin roles set for all cloud apps with a few exceptions such as Office 365.This CA policy has a signin frequency set…31/08/2023New Blog | Introducing “What’s New” in Microsoft Entra
By Shobhit Sahay With more than 800,000 organizations depending on Microsoft Entra to navigate the constantly evolving identity and network access threat landscape, the need for increased transparency regarding product…15/04/2024New Blog | Meet us at Identiverse: May 28-31 in Las Vegas
By Nichole Peterson (SHE/HER) The annual Identiverse conference is a great opportunity to meet with our community, immerse in the latest challenges and innovations, and hear from leaders in the…14/05/2024Achieve higher security with certificate bindings – How it works!
Dear Microsoft Entra friends, In this article I would like to take a closer look at the subject of certificate affinity binding. So that even more security can…02/12/2023Unable to setup Microsoft Global Secure Access
Firstly I am not getting any login prompt to login to the GSA client on any of my devices and when I navigate thru to the advanced diagnostics area and…25/07/2024Azure AD Connect – One forest – Two tenants – Same OUs
Hi All, We are looking to add a second Azure AD Connect to our environment to have users synchronized to a new tenant(second tenant different domain). According to Microsoft…01/10/2024GSA – Web content filtering – Custom blocked page
Hello everyone, I have a quick question. I just tested the 'Web Content Filtering' of Global Secure Access. However, in Microsoft's documentation, two processes are mentioned for displaying blocked sites…05/07/2024Enable Conditional Access template for guest MFA requirement and SharePoint sharing
Hi, I plan to enable template for Conditional Access for GUEST and External users to be forced for MFA. I just cant find answer whether this will affect also…09/02/2024AD B2C session limit issue
Token lifetime limit issue We have a requirement to set token session limit to 3 months. Is there any way we can do it?On portal it's showing we can set…11/09/2024Unable to disable SSPR for Administrators
According to this link I can disable SSPR for Administrators. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-policy?WT.mc_id=Portal-Microsoft_AAD_IAM#administrator-reset-policy-differences However, upon attempting to do so I am met with the following error. S C:WindowsSystem32> Update-MgPolicyAuthorizationPolicy -AllowedToUseSspr:$falseUpdate-MgPolicyAuthorizationPolicy_UpdateExpanded: Insufficient…22/07/2024