Entra.News #27: This week in Microsoft Entra

Learn about my new YouTube series on CA policies, managing privileged role assignments and more from the community.

👋 Hi, Merill here with this week’s round up of the latest news on Microsoft Entra from around the globe 🌍.

This week I started a new YouTube 📺 series on Conditional Access Policies and published the first two videos on Grant and Block policies. I’m starting with the basics and plan to dive into all of the different CA features.

I’m keen to hear your feedback on these videos and if there are specific topics that you would like to see covered.

If you know anyone that might be benefit from this please share and subscribe over at https://www.youtube.com/@merillx.

Enjoy!

---

⚡️ Microsoft

📖 Read

• Five ways to Secure Identity and Access for 2024 • Joy Chik, President, Identity & Network Access @ Microsoft

• 10 Essential Insights from the Microsoft Digital Defense Report 2023 • Quy Nguyen

• Easily Manage Privileged Role Assignments in Microsoft Entra ID Using Audit Logs • Timur Engin

From the community…

💬 Matt Zorich asks ‘What are the first five steps you take to secure a brand new Entra ID tenant with all the P2 features?’ Lots of interesting responses 👀

🗞️ Read

• Evaluating Microsoft Entra ID Against Okta Workforce Identity SSO • Jon Towles

👮‍♂️ ID Governance

• Entra ID PIM – Discovery & Insights • Julian Rasmussen

📦 Apps

• How to add claims from external systems in Entra ID token using the custom claims provider • Suryendu Bhattacharyya

🔑 Authentication

• Demystifying Authentication in Microsoft Entra ID • Lukas Beran

👥 Group Management

• Entra ID – Dynamic group rule builder does not include ‘contains’ and ‘notcontains’ • Benoit Hamet

🤖 Automation & DevOps

• Connect to Microsoft Graph PowerShell Using Certificates with Azure Automation • Daniel Bradley

• Managing Passwords for Entra ID Accounts with PowerShell • Tony Redmond

• Mastering Microsoft Graph PowerShell SDK Foibles • Tony Redmond

🚦 Conditional Access

• Dynamically Exclude New Hires from Conditional Access Policies for Registering MFA, Temporarily • Anton Willoughby

🖥️ Devices

• Configure Azure file shares for Entra joined Windows devices and hybrid identities • Peter Klapwijk

📈 Reporting and Insights

• How to Report User-Consented Permissions on Applications in Microsoft Entra • Daniel Bradley

• Reporting on Entra ID integrated applications (service principals) and their permissions • Vasil Michev

🥷 Security

• How to manage external admins in a secure environment • Myron Helgering

• Delegate Admin Consent but for Specific Permissions Only • Tom Aafloen

• Roles allowing to abuse Entra ID federation for persistence and privilege escalation • Clément Notin

• Entra ID monitoring and alerting - are you doing the basics? • Mike Duddington

🧰 Workload ID

• Microsoft Entra Workload ID - Incident Response with Microsoft Sentinel Playbooks and Conditional Access • Thomas Naunheim

📺 Watch

Let's discuss Global Secure Access (SSE) - Entra ID (20 min) • RioCloudSync

Describe Azure External Identities - AZ-900 Certification Course - January 2024 New (11 min) • John Savill

Describe Azure Directory Services - AZ-900 Certification Course - January 2024 New(14 min) • John Savill

Offboarding devices from Intune, Entra ID and Autopilot (1 hr) • Ugur Koc

👨🏽‍💻 Merill’s corner

→ Creating your first Microsoft 365 (MFA) Conditional Access Policy

→ Are External users getting privileged access to your Azure tenant?