I engaged in a conversation on the internet where it was stated that there isn’t a way to restrict FIDO2 authentication methods for specific set of users. Well, there kind of is. And in this short blog post I’m going…
Did you know that you can now delegate Azure RBAC assignments to ease your own burden as administrator? There has always been a possibility to assign Owner or User Access Administrator role, but what if you wanted to delegate the…
One of the things we can do to protect our organization from account takeover attacks is to use locations as one of the conditions in our Conditional Access policies. Relying on location signal alone is not a good practice, but…
This is part 4 of 4 part series. If you haven’t read previous parts of the blog series, I suggest reading them first: go to part 1 Not all authentication methods are created equal. Microsoft Digital Defense report from 2023…
This is part 3 of 4 part series. If you haven’t read previous parts of the blog series, I suggest reading them first: go to part 1 Not all authentication methods are created equal. Microsoft Digital Defense report from 2023…
Defense in depth is a concept in cybersecurity that implements a multi-layered security measure strategy to protect data and digital assets. Should a cybercriminal bypass one security control, he would still have to face multiple other security controls in order…
This is part 2 of 4 part series. If you haven’t read part 1 of the blog series, I suggest reading it first: go to part 1 Not all authentication methods are created equal. Microsoft Digital Defense report from 2023…
Not all authentication methods are created equal. Microsoft Digital Defense report from 2023 lists multi-factor authentication as one of five key protection controls against cyber attacks. As leaks like recent Okta and LastPass breaches are becoming more and more common,…
If you’re experiencing inconsistent behavior with your authentication method registration or the use of authentication methods for multi-factor authentication (MFA) or self-service password reset (SSPR), this article might be for you. Or if you don’t have any problems, but have…
