Tobias Zuegel | mrentraid.bsky.social

-- This account has moved --
🦋 architect

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@fabian_bader @Alex_A_Simons Oh no 😱
My precious tweet is now useless 😂

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@rucam365 @DylanInfosec Same. But I moved to requesting at least two description fields, a version and an owner field - so there is some room to cut features and still get what is really required.
Any idea who is taking care of CA now after @Caleb_B changed role?

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@identitysummit Got it … quite far down 🤷‍♂️ Thanks

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

#IdentitySummit Does anyone have a Teams link to participate?

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@fabian_bader @Tseyf34 @JeffAprea @identitysummit Got it … further down in the ticket 🤷‍♂️

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@identitysummit How to find the Teams link? Nothing on the webpage … nothing on the ticket 🤔 Am I too dumb?

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@Alex_A_Simons @NathanMcNulty I loved the interactive language section in Encarta 🥰
I still greet a school friend with "pasaqueta" which means 4 (?) in Quechua (?) language …

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@merill @TeriRadichel @SwiftOnSecurity @vxunderground @gvanrymenant @rafal_fitt @azure_pirate @UK_Daniel_Card @lukasberancz @msft_hiker @divinetechygirl @CynicLib @jandedobbeleer @HackingLZ @EricaZelic @mrgretzky @_wald0 Thanks @merill - your content is always amazing and you help so many users with it. Thank you 😊

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

I was made aware of this new option to connect SAP GUI to #AzureAD via SAP Identity Authentication Service: https://t.co/MIR8jA4S2S

Finally #MFA for SAP GUI 🤗

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

Finally Apple Enterprise SSO plug-in is GA !!
Thanks folks.

[Merill Fernando @merill]

Everyone is super happy about the Apple Enterprise SSO plugin getting to General Availability (GA).

Here's a quick overview of what it does and how you can turn it on today!

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

One #AzureAD license per human is ok for multiple tenants 🤩

[Alex Simons @Alex_A_Simons]

@joesuffceren @alexbchalmers @MrAzureAD @azuread @darkocobe @merill As it was explained to me by our licensing guru, you need one license per human regardless of how many tenants that human has an account in as long as all those tenants are in Microsoft’s public cloud.

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@joesuffceren @Alex_A_Simons @alexbchalmers @azuread @darkocobe @merill “Alex said” always works in AAD context 😂

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

How is #AzureAD Premium licensed when a physical user has more than one account (e.g. separation of duties). Do break-glass accounts need separate licenses? I have conflicting information from Microsoft ... @azuread @Alex_A_Simons

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@Alex_A_Simons @joesuffceren @alexbchalmers @azuread @darkocobe @merill How does that work in reality? I buy 10 AAD P2 licenses for 10 humans in Tenant A (prod). In Tenant B (dev), I will still need to buy one P2 license to enable P2 functionality. Is that it?

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

This is absolutely brilliant 🤩

@Caleb_B Why not integrate this into CA?

[Merill Fernando @merill]

Quick heads-up folks. Manual generation of your documentation is now available again in the app.

Many thanks to @maisarissi_msft who showed me how to deserialize the CA policy json using @microsoftgraph SDK v5.

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@Alex_A_Simons @sven_frank @2BuckDave Authentication Strength policies I suppose.

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@merill Thanks for the comparison, it is sad that it is not in the official docs. But the real problem is that there is no conceptional integrity here … why so many concepts that are almost identical?
How to explain this mess to customers?

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

There are two options to enforce compliant devices via #AzureAD Conditional Access:
A) Grant Require compliant device
vs
B) Block with device exclusion rule "(device.deviceOwnership -eq "Company" -and device.isCompliant -eq True)"

What do you use and why?

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@alschneiter @sccm_cb @rabbit11485 @acjuelich "Require approved client app" or "Require app protection policy" or both?
Docs on the difference are quite poor.

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

@NathanMcNulty @TruBluDevil Oh so no FIDO2 anymore with macOS 13?!? Currently, I can still choose …

[Tobias Zuegel | mrentraid.bsky.social @MrAzureAD]

On enrolling a USB security key to #AzureAD, Edge on Mac offers me a new "Sign-in using a QR code on your phone" option. This smelled like #passkey 😊 and indeed, I could create a passkey on iPhone 🥳
But: The portal could not save the key 😢

@TruBluDevil More patience needed?