Category: Microsoft Azure Page 2 of 10

Are you looking for information about Microsoft Azure? In this archive you will find all our posts about Microsoft Azure.

A device-bound passkey is an advanced security feature implemented in Microsoft Authenticator. It is a unique security key that is tied to a specific device. When a user logs in to their account, they use this key to verify their identity. Since the key is bound to the device, no one else can access the user’s account, even if they know the password, unless they also have access to the device.

Microsoft Entra Conditional Access: Block Authentication Flows

By Oliver Müller

On 2. April 2024

In Microsoft Azure

The Microsoft Entra Conditional Access for authentication flows regulates the use of the device code flow and authentication transfer. The device code flow is used to authenticate devices that do not have a browser or whose input is restricted, such as smart TVs, IoT devices, or printers. The device code flow represents a high-risk authentication flow, which could be exploited in phishing attacks or to gain access to corporate resources on unmanaged devices. The authentication transfer is a new flow that provides a seamless way to transfer the authenticated state from one device to another. In the desktop version of Outlook, users might be presented with a QR code. When they scan it on their mobile device, their authenticated state is transferred to the mobile device.

Temporary Access Pass in Microsoft Entra: what it is and how to use it

By Oliver Müller

On 5. March 2024

In Microsoft 365, Microsoft Azure

A Temporary Access Pass (TAP) is a time-limited passcode that can be configured for single or multiple use. The Temporary Access Pass (TAP) allows the user to securely sign in to the Microsoft Cloud within a defined time period to set up additional authentication methods. These secure authentication methods include passwordless methods such as FIDO2 security keys or the Microsoft Authenticator App. The limited time period for access authorisations makes the Temporary Access Pass (TAP) an indispensable tool for security guidelines and compliance requirements.

Microsoft Entra Privileged Identity Management (PIM) and FIDO2: Increasing the security of privileged roles

By Oliver Müller

On 6. February 2024

In Microsoft 365, Microsoft Azure

Privileged roles and permissions in Microsoft Entra ID allow you to manage all aspects of Microsoft Azure and Microsoft 365. To make phishing and other attacks more difficult, a secure password for privileged Microsoft Entra roles is no longer enough. Phishing-resistant multi-factor-authentication, such as FIDO2 protocol on a security key in combination with Microsoft Entra Privileged Identity Management (PIM), significantly increases security for the Microsoft Tenant and convenience for the user.

Microsoft Entra Internet Access: Protect users with powerful web content filtering

By Oliver Müller

On 2. January 2024

In Microsoft Azure

Microsoft Entra Internet Access is a cloud-delivered solution that secures access to web content. It protects users, devices, and data from internet threats. This solution is part of Microsoft’s Security Service Edge (SSE), which also includes Microsoft Entra Private Access. This solution is based on the core principles of Zero Trust Network Access (ZTNA), which aims to apply the principle of minimal rights, explicit verification and assumption of an attack. Microsoft Entra Internet Access implements adaptive access controls, simplifies network security, and enables a consistent user experience, regardless of location. Microsoft delivers the solution over the Microsoft Wide Area Network, which covers more than 140 countries and 190 network edge locations.

Category: Microsoft Azure Page 2 of 10

Hardening your Identities: Microsoft Authenticator device-bound passkey

Microsoft Entra Conditional Access: Block Authentication Flows

Temporary Access Pass in Microsoft Entra: what it is and how to use it

Microsoft Entra Privileged Identity Management (PIM) and FIDO2: Increasing the security of privileged roles

Microsoft Entra Internet Access: Protect users with powerful web content filtering