Azure – Workday integration with Azure AD is getting stronger

Benoit HAMET

As you may already know you can use Workday to automatically manage user account provisioning/termination with Azure AD (and/or Active Directory). Well this integration is getting stronger and simpler as the solution is now reaching the general availability state with some interesting updates: The new Provisioning Agent with built-in support for high availability and failover allows you to configure user provisioning to multiple on-premises Active Directory domains User account provisioning…

Read More

Identity – A new form of identity is being developed by Microsoft

Benoit HAMET

This clearly follows the path of what has been already announced by Microsoft for using blockchain to manage, protect and validate identities. A new form of identity, called Decentralized Identity, is under way to help developer to validate identities. You can start using these API’s (based on the W3C CCG draft specifications – https://w3c-ccg.github.io/did-spec/) by using the samples and documentation available here http://aka.ms/DIDforDevs This will help authenticating and validating various…

Read More

Azure AD – New capabilities for identity governance on Azure AD

Benoit HAMET

You can now define policies to let your end-users requesting access to your corporate resources – from group membership to role permissions – either with automated or manual approval. At this stage, this is currently available only through private preview. You can register your interest here https://aka.ms/azureadidentitygovernancepreview

Read More

Azure – Define a security baseline for Azure AD Administrators

Benoit HAMET

A new security feature has been delivered in preview for Azure AD; a security baseline for any Azure AD Administrator. This baseline will be enabled by default (during the preview you HAVE to enable it) and is going to request multi-factor authentication (MFA) for any privileged account like: Global Administrator Service Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Security Administrator To enable/disable (while not recommended) the security baseline go…

Read More