InbarCK

Identity Security PM @AzureAD.

[Alex Weinert @Alex_T_Weinert]

Not every scenario is created equal! I am THRILLED to announce Authentication strengths, which allow you to use Azure AD Conditional Access to specify exactly what authentication methods are needed for your zero trust policies - read on! https://t.co/F3XEPC8Rxx

[InbarCK @inbarck]

Authentication strength helps our customers to require the right authentication method for their most sensitive resources. It is so exciting to ship the work from the team to customers and see their reaction 💛https://t.co/9rAXSpPUym

[InbarCK @inbarck]

@fabian_bader Thanks you for your collaboration on this private preview!

[InbarCK @inbarck]

@TruBluDevil @dean144 @markmorow @_nitika_gupta But, if you want a more secure strength (passwordless or phishing-resistant MFA), I would start with report only mode as suggested by Libby.

[InbarCK @inbarck]

@TruBluDevil @dean144 @markmorow @_nitika_gupta Great question!The built-in MFA auth strength is equivalent to the current MFA grant control (for internal users). If you have such policy, you can consider switching over to the auth strength control.

[InbarCK @inbarck]

@merill @adamUCF @TruBluDevil Auth strength except federated single factor and federated multifactor claims from the IdP. You can use it as part of the built-in MFA strength or in a custom strength.

[Alex Simons @Alex_A_Simons]

Today's news: Azure AD Temporary Access Passes are now GA. Simplified employee onboarding in a passwordless world! https://t.co/JbZ7GeiQzr

[Jan Bakker @janbakker_]

Temporary Access Pass is a great way to bootstrap passwordless, like FIDO2 security keys! Learn how:

https://t.co/VLePGogKMA

@FIDOAlliance @azuread

[InbarCK @inbarck]

@Ryen_Mac Congrats!!! Well deserved 💛

[Alex Simons @Alex_A_Simons]

Today's news: A ton of Microsoft Authenticator improvements, including requesting app and location! Read all about it here: https://t.co/00uxLgxFE8

[Bailey Bercik - @[email protected] @BaileyBercik]

Probably the coolest Ignite session by @inbarck & @cybertarek. It's a great 45 min whiteboarding session on passwordless. Definitely recommend watching it https://t.co/LfnExiOY4L

[InbarCK @inbarck]

@kevinpking @Alex_A_Simons Hi Kevin, you can consider providing the user a Temporary Access Pass - that would satisfy the MFA requirements (if you have CA policy to require MFA on the registration flow). More details here: https://t.co/n212THbzEM

[Nathan McNulty @NathanMcNulty]

So you don't enforce MFA on all Azure admin roles? Not really sure where to start?

Looks like Microsoft has added a nice doc (and script in the doc) to help discover and assess your privileged users so you can minimize potential impacts ;)

https://t.co/MwpH7CShX0

[Shipping Tomorrow 🚀 @ShippingTmrw]

Take a screenshot and share your PM highlight with us !🎃

[InbarCK @inbarck]

If you are interested to know how phishing resistant authentication methods works under the hood, @cybertarek and I have a session for you.

[Rick Claus 🦋 @RegularITguy.com @RegularITguy]

Todays #blueprintFiles session at #MSIgnite is how phishing resistant authentication works. I was SO EXCITED when the passwordless team stepped up. @inbarck & @cybertarek were awesome at breaking things down.

Add it to your schedule!

https://t.co/cQOLLO888X
#azops #itpro

[InbarCK @inbarck]

@TruBluDevil @C016SMITH @jwish__ Here are a few examples from private preview customers: https://t.co/18tdUtiKdT

[InbarCK @inbarck]

@barzik Seems familiar:

[InbarCK @inbarck]

@MicrosoftLife

[InbarCK @inbarck]

@cybertarek and I are talking about phishing resistant authentication methods at #MSIgnite. You can add it to your schedule now https://t.co/kq5hT1yVfi