Azure AD

About 2 years ago (June 2021), I had fun experimenting with a new feature that was in preview: macOS Single Sign-On (SSO) for Azure AD on Microsoft 365 applications and services. ⚠️ Update as of June 1, 2023 The “Microsoft Azure AD” plug-in is finally in General Availability and is ready to use in production environments! You might be wondering, “What on earth is it for?” This feature allows you to authenticate yourself and your fantastic Mac more easily to Microsoft 365 services and applications without repeated credential prompts, making the user experience even smoother and seamless.

Friday resource! If you’re tinkering with Local Groups Membership policies in Intune and (like me) have cursed a bit while converting group/role ObjectIDs to SIDs and vice versa, here’s a website that does it online instantly and conveniently. 🔹 ObjectId ➡️ SID 🔹 SID ➡️ ObjectId I’d love to tag the author of this wonderful utility (Erik Engberg) here, but from what I’ve seen, they’re not on LinkedIn. If I’m mistaken and someone knows their exact profile, please let me know so I can give them proper thanks.

Today’s episode is a true injection of caffeine and valuable resources: Valeria Sava talks to us about ADFS and how to retire it by migrating applications to Azure AD. Are you interested? Yes? Then after watching the video, don’t miss this workshop in Italian dedicated to this very topic! Valeria and I extensively discussed it while enjoying our coffee. Here are all the details! 🗓️ March 28, 2023 ➡️ Microsoft Workshops: How to successfully migrate away from AD FS to Azure AD

It took me a while to make this video, but finally, here I am: Azure Virtual Desktop Single Sign-On to Azure AD. One of the main “criticisms” always directed at AVD is the double authentication, which many consider a hassle. With Single Sign-On, the process becomes smoother, and the required authentications decrease. Could I have just shown you the simple SSO? Clearly NO, so I even included a FIDO2 security key in it!

On March 8, 2023, a joint event was held between the Microsoft Intune Italian Users Group and the Microsoft Security Italian Users Group: the video of the sessions is now available. Together with the legendary Michele Sensalari, we talked about certificate-based authentication on Azure AD. Marco Moioli and Davide Salsi, on the other hand, delved into how to use the MAM (Mobile Application Management) features of Intune to provide security in BYOD scenarios, and Davide also demonstrated the new Microsoft Tunnel for Mobile.

📺 New video: Today I’ll tell you about Temporary Access Pass in Azure AD and how it can be useful in specific situations. ☑️ Onboarding a user to register a passwordless authentication method ☑️ Recovery of a lost or unusable passwordless access ☑️ Initialization of a Windows Autopilot device ☑️ Joining a device to Azure AD ☑️ Initial setup of Windows Hello for Business All the details in the video!