Samuel Devasahayam

Group Program Mgr in the Identity division @ Microsoft. Run the Authentication & Device platform team which includes Azure AD, ADFS and Devices. Music lover.

[Samuel Devasahayam @MrADFS]

If you did not get to this, check out the https://t.co/A4dYKqOxx6 link.

[Samuel Devasahayam @MrADFS]

@kevin_chalet @Alex_A_Simons Kevin, could u DM me specifics?

[Samuel Devasahayam @MrADFS]

@anders_abel @Alex_A_Simons @azuread @anders_abel , we are looking into it. Will DM you since we may need some additional data.

[Samuel Devasahayam @MrADFS]

Hey folks! We just added a set of new features to help customers move their apps/authentication off ADFS (3P IDP) over to Azure AD & secure them better with Conditional Access! Check it out!

[Samuel Devasahayam @MrADFS]

@Luis_P_743 @jsnover Hey Luis, did this get resolved? If not could u clarify the scenario. It seems like an automated device provisioning scenario.

[Samuel Devasahayam @MrADFS]

@DrAzureAD @zatennisfan @Secureworks Thanks for the detailed post! As mentioned, this requires GA (which you should be protecting at all costs) and treat your ADDS/ADFS physical infrastructure as is normally recommended for Tier0 infra.

[Sean Deuby @shorinsean]

Heads up, #ActiveDirectory #sysadmin's. This free utility evaluates your AD against 59 different IoEs, orders them by severity, and maps them to the MITRE ATT&CK framework. @MrADFS

[Samuel Devasahayam @MrADFS]

@IwisVC Which log is this? ADFS logs? If so, I need to check with my engineering team. Let me know if you still need help.

[Samuel Devasahayam @MrADFS]

@jayvdz Yes, it is still supported.

[Samuel Devasahayam @MrADFS]

Howdy folks, we have released Microsoft Defender support to monitor and detect intrusions on #ADFS servers. We recommend close monitoring of your ADFS servers just like you would do for domain controllers. https://t.co/Kc9Yfpp8If

[Samuel Devasahayam @MrADFS]

We continue to make it simpler for you to manage authentication for your users with Azure AD! Also get to password-less as quickly as you can!

[Alex Simons @Alex_A_Simons]

Today's news: We've made it even easier to manage user authentication methods in Azure AD (including improved API's!) https://t.co/Cq6nKqxsqb

[Samuel Devasahayam @MrADFS]

@andiekaran @Alex_A_Simons @Steve_C_Brown Andrea, let me know what the issue is.

[Samuel Devasahayam @MrADFS]

@Steve_C_Brown @Alex_A_Simons @andiekaran Steve, pwdless (FIDO, authenticator, WHFB) already work for federated accounts for AAD apps. Can you clarify?

[Samuel Devasahayam @MrADFS]

After the craziness of the last 7 days politically in the US (including debates) all I can say is #RegisterToVote #Vote #VoteEarly!!! Make your voice heard & count(ed)!

[Samuel Devasahayam @MrADFS]

@miketheitguy Hey Mike, do work with your GTP contact to file this as a blocker with some clarity on use cases (e.g. air gapped vs on-prem only app)

[Samuel Devasahayam @MrADFS]

@miketheitguy Hi Mike, we are still completing FIDO in AAD. Currently we have no plans to bring FIDO natively to on-premises. Things could always change!

[Samuel Devasahayam @MrADFS]

@tonyszko @DebugPrivilege @miketheitguy @gvnshtn MFA on ADFS is usually used when using third party MFA providers integrated with ADFS or if the customer is using smart cards for MFA. We'll add more in Azure AD to natively support this in the future.

[Samuel Devasahayam @MrADFS]

@msimonsen Shoot!

[Samuel Devasahayam @MrADFS]

@AlexFilipin @markwahl @azuread @markmorow @citrix Yup. Should work. Front end auth to Citrix via AAD B2B, token contains the UPN that has been provisioned in Citrix server AD environment. FAS acts like an impersonation service that provisions a short lived certificate to the client that is used to RDP.

[Samuel Devasahayam @MrADFS]

@MrAzureAD @nicolonsky Tobias we have no immediate plans for per app configuration. Do raise this via Florian. Also device CA at AAD does work.