-- This account has moved -- 🦋 https://xitter.cf/t.co/pz7plN7tM1 Identity architect
Nordrhein-Westfalen
Joined February 2012
- Tweets2K
- Following394
- Followers1.2K
- Likes4K
#IdentitySummit Does anyone have a Teams link to participate?
I was made aware of this new option to connect SAP GUI to #AzureAD via SAP Identity Authentication Service: blogs.sap.com/2023/05/04/sap…
Finally #MFA for SAP GUI 🤗
Finally Apple Enterprise SSO plug-in is GA !!
Thanks folks.
Everyone is super happy about the Apple Enterprise SSO plugin getting to General Availability (GA).
Here's a quick overview of what it does and how you can turn it on today!
ALT Apple users rejoice! Starting today your admin can enable single sign on for your iPhone, iPad and Mac. All it takes is 3 steps
One #AzureAD license per human is ok for multiple tenants 🤩
This is absolutely brilliant 🤩
@Caleb_B Why not integrate this into CA?
Quick heads-up folks. Manual generation of your documentation is now available again in the app.
Many thanks to @maisarissi_msft who showed me how to deserialize the CA policy json using @microsoftgraph SDK v5.
ALT Screenshot of idPowerToys with manual generation available.
There are two options to enforce compliant devices via #AzureAD Conditional Access:
A) Grant Require compliant device
vs
B) Block with device exclusion rule "(device.deviceOwnership -eq "Company" -and device.isCompliant -eq True)"
What do you use and why?
On enrolling a USB security key to #AzureAD, Edge on Mac offers me a new "Sign-in using a QR code on your phone" option. This smelled like #passkey 😊 and indeed, I could create a passkey on iPhone 🥳
But: The portal could not save the key 😢
@TruBluDevil More patience needed?
Question for #Microsoft Defender licensing experts:
Are licenses for Defender For Identity #MDI sufficient to use #KQL on MDI data in Advanced Hunting?
Documentation is ambiguous.
@naimious
Is it just in my tenant or are #AzureAD Entitlement Management approval mails not sent/delivered?
@MrDebChoudhury
This 👇🏻 is the sign-on/MFA we want …
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
It happened again:
It’s not DNS. There is no way it’s DNS.
It was DNS … well sort of … it was the hosts file 😂
@NerdPyle
You should follow @zoll_nerd for more insights into what’s happening and planned in the SCIM working group.
On 2022-08-31, #AADConnect V1.x will run out-of-service. If you are on this version - update now.
It is not that hard. We had to update from an older version last week and it went very smooth - and as you know, the V2 endpoint is much much faster.
@rjong999 @docsmsft The #AADConnect docs still say at various places that GA is required while Hybrid Identity admin is sufficient.
I will open Github issues for all occurrences…
Long needed ... UI overhaul for #AzureAD "My Apps" 👇Well done!
I am wondering when "My Groups" gets some more love. It is still in the Windows Phone design and thus the abandoned locked away cousin in the "My <...>" family.
Public Preview: Enhanced "My Apps" experience ift.tt/ENW2gTb
The #AzureAD PIM article docs.microsoft.com/en-us/azu… needs to be updated: It states that licenses must be assigned and that licenses are per account not per human. Both is to my understanding not true.
Issues on these regards were closed (#95052, #65294).
@docsmsft @JefTek
If you want to get scared over the weekend then you read @janbakker_‘s excellent #evilginx tutorial … microsofttonline.com how mean 😳🤩
Got some time to kill over the weekend? Try this!
janbakker.tech/how-to-set-up…
Any idea why "onPremisesSamAccountName" is not available as source attribute in #AzureAD provisioning?
@ArvindHarinder
Game changer when using #AzureAD with MacOS 👇🏻👇🏻👇🏻
Massive improvement! Well done 👏
Platform single sign on is coming to macOS!
What does this mean? Users can now sign into a mac with their AD/Azure AD credentials just like Windows users.
Users will then get single sign on to ALL THE APPS with a PRT token just like on Windows.
See techcommunity.microsoft.com/…
ALT Illustration showing macOS sign in page being driven by Azure AD
Cross-tenant access settings is great way to increase security and convenience in #AzureAD B2B collaboration scenarios.
Great that it is now GA! Thanks @RobinGo_MS+Team 👏
This Post is from an account that no longer exists. Learn more