ClassyGull

[ClassyGull @ClassyGull]

@IAMERICAbooted The captain is an idiot.

[ClassyGull @ClassyGull]

@IAMERICAbooted Documentation is a key to success. Yes it’s for myself primarily. There is no way I could quickly recall things without it.

[ClassyGull @ClassyGull]

@AmazingSights Looks like greater white fronted geese

[ClassyGull @ClassyGull]

@HustleBitch_ I’ve known people with Tourette’s, that ain’t it. Wild that scores points with some. Unbelievable.

[ClassyGull @ClassyGull]

@1ssve Easily replaced with a shared calendar.

[ClassyGull @ClassyGull]

@IAMERICAbooted Are you aware of any solutions that helps with entra app attestation? Essentially attest app is still valid or it will be disable/deleted.

[ClassyGull @ClassyGull]

Did more testing today following your blog @NathanMcNulty but wasn’t able to add eligible member to pim enabled group located in an RMAU. This test group is not enabled for role assignments. After looking over audit logs for my account (even though it proxies through service principal) it does show the failure but it’s not for ms-pim identity. It’s for one called Azure AD PIM. Only the sp id is listed, app id is not provided. Perhaps MS has changed what sp is used? Without app id I can’t register it and hence can add it to custom role. Thought?

[ClassyGull @ClassyGull]

@1ssve True. Although it’s a lot less painful with AI now.

[ClassyGull @ClassyGull]

@techspence What changed?

[ClassyGull @ClassyGull]

@randomrecruiter Something is not right with tracking employees. Zero trust is bad atmosphere.

[ClassyGull @ClassyGull]

@techspence How do you get people to care?

[ClassyGull @ClassyGull]

@NathanMcNulty @IAMERICAbooted I think the problem I had run into was PIM in combination with ATR flag. Thanks for that article, that’s exactly the guidance I followed.

[ClassyGull @ClassyGull]

@NathanMcNulty @IAMERICAbooted Have you seen a way to use PIM enabled groups inside a RMAU?

[ClassyGull @ClassyGull]

@fabian_bader Have you seen the enrollment UX documented somewhere?

[ClassyGull @ClassyGull]

Hey @merill wondering if you have any insight on this topic. I want to leverage device-bound passkey in MS Authenticator, however there is a known issue when also leveraging Conditional Access to require app protection policy for all apps on mobile os. The provided workarounds aren’t great but there is an undocumented work around of excluding Azure Credential Configuration Endpoint Service app from app protection CAP. This works but not sure if that introduces additional risk. Thoughts?