Raj Balakrishnan

Customer Success @Microsoft Tweeting #code #dev #azure. Ask me about app/platform modernization, Identity & Devops and yea, opinions are my own 😉

[Raj Balakrishnan @raj_msft]

I started my new job at @Microsoft #Netherlands and will be helping customers, developers with @Azure platform. Yay 😍 any tips for me ?

[David Fowler @davidfowl]

It's magical being able to write code like this and have a tool spit out the IaC to deploy it:

#dotnet #aspire

[Codie Sanchez @Codie_Sanchez]

Your most expensive mistake you make will not be what you do, but who you choose to do it with.

[Navalism @NavalismHQ]

"Desire is a contract that you make with yourself to be unhappy until you get what you want."

@naval

[Rick van den Bosch @rickvdbosch]

We've been thinking about, and working up to, this for quite some time. Today we finally have the very first video on our #BeneluxCSA channel. The #Azure News Recap for September 2023 is here!
#anr202309

https://t.co/Tb5KeGIxNZ

[Gergely Orosz @GergelyOrosz]

On the question of whether it's worth it to do a BSc/ MSc degree versus just self study:

While you can teach yourself most of the things, one big difference is immigration options. Plenty of countries won't allow immigration (even with a job offer) without one of these degrees.

[Merill Fernando @merill]

I've recently noticed that Azure AD admins are being asked to create multi-tenant apps in their corporate tenant.

In some instances, it was the devs in the org asking for this, in other instances it was the application vendor.

Here are some things to watch out for 👇

Multi-tenant apps are meant for ISVs and SaaS vendors to create an instance of an app in 'their own tenant'. Examples of such apps are ServiceNow and SalesForce.

When an app is created as a multi-tenant app, ANY user from ANY Azure AD tenant can visit the app's url and sign in.

If you create a multi-tenant app in your corporate tenant and apply a conditional access policy. The policy only applies to users in your tenant.

⚠️ I'll repeat ➟ your CA policies do not apply to users signing into your multi-tenant app in their own tenant.

So, what is the general rule of thumb that Azure AD admins and cybersecurity teams should follow?

If the app is from a vendor/SaaS provider:
✅ Add the app to your tenant from the Azure AD Application Gallery
✅ If the app is not in the gallery, you as the customer can request the vendor to get their app listed on the Azure AD app gallery
✅ If app gallery is not an option, request the vendor to create the app in their own tenant. Use the admin consent model to add the app to your tenant.
✅ If the only option provided by the vendor is to create the app in your tenant, push for the vendor to allow you to create a single tenant app.

If the app is developed by devs in your org and is only meant for users in your own org.
✅ Ask why the dev needs this to be a multi-tenant app?
✅ Ask if the devs have implemented appropriate checks to prevent sign-ins from other tenants.

There are many valid scenarios for creating multi-tenant apps in your tenant, including
✅ You are a SaaS vendor or ISV and you create and publish apps that Azure AD customers can consume
✅ You manage multiple Azure AD tenants in your org and you need a single service principle (workload identity) to access the other tenants (e.g. automate DevOps tasks across your tenants)

Here are some further reading on the topic of multi-tenancy. These are meant for devs however its good reading for admins to appreciate what it takes to build a least-privilege multitenant app.

👉 https://t.co/9JRZ2ynEdZ
👉 https://t.co/VyiyiK542A

Liked this post? Please retweet this to share with your network. 🚀

Feel free to follow me. I try to post at least one weekly tip related to Microsoft Identity, Azure Active Directory or Microsoft Graph. 🙏

[Mosh @moshhamedani]

#Redux is an overkill for many apps.

#Microservices architecture is an overkill for many apps.

#Kubernetes is an overkill for many apps.

Just because it’s popular doesn’t mean it’s the right fit. Use the right tool for the job.

[.NET Zuid @dotNetZuid]

.@raj_msft is coming to our event "Dylan Beattie & Experience center tour @ ASML" !https://t.co/ut1komrRqa

[Raj Balakrishnan @raj_msft]

@rickvdbosch Studio ?

[Alex Hormozi @AlexHormozi]

The reason you are stressed is you have decisions to make and you’re not making them.

[World of Engineering @engineers_feed]

Grade school homework in China: find the height of the table.

[Jayson Gaddis @JayGaddis]

If you think you are a great communicator, do this simple test to see if it's true...

[Petabridge @petabridge]

"Priva: Automating Agriculture with https://t.co/xeeWW8wgcn" - January 18th https://t.co/xeeWW8wgcn Community Standup 🌱 - https://t.co/HPoK8t8BPc

[Raj Balakrishnan @raj_msft]

@marcduiker Gefeliciteerd @marcduiker ! Playing with diagrid is on the todo and now you’ve given another reason 😉

[Raj Balakrishnan @raj_msft]

@dburka I could relate to SV more often 😊

[Raj Balakrishnan @raj_msft]

@rickvdbosch @Microsoft Welcome aboard Rick ! Happy to have you part of the team

[Dr. Julie Gurner @drgurner]

When people make things look easy, it is often a signal of incredible talent.

[Raj Balakrishnan @raj_msft]

Get familiar with #azure savings plan here https://t.co/7pb2AFHx5l