WFH and Remote Access Security Risks
Mitigation – Important multi-factor authentication automatic session timeouts and access monitoring Unauthorized access to devices Any machine that is capable of connecting to your…
Read the articleBlog
Notes on identity architecture, federation and cloud access — written from the work itself.
VDI and Thin Clients – Securing Work From Home Compute
VDI vs. Thin Clients: Benefits, Differences and Use Cases VDI and Thin Clients: Understanding the Two Options Virtual Desktop Infrastructure (VDI) and thin clients…
Read the articleDomain joining an Azure VDI to a corporate Windows Server AD
Azure Virtual Desktop Domain Join: AD DS vs. Entra ID Can Azure Virtual Desktop Join a Corporate Windows Active Directory Domain? Yes. Azure Virtual…
Read the articleCan you SSO into an API?
Yes – SSO to an API is possible using one of the following tools API Manager Supports SAML-based SSO, which allows users to log…
Read the articleAPI authentication and OAuth
OAuth for API Authentication – Some Security Checks Limit SCOPE of OAuth token to READONLY Limit The duration – expiration of the Token to…
Read the articleMicrosoft Intune Device Management
Microsoft Intune and Azure Active Directory (Azure AD) are both services that help manage devices and users in an organization, but they have different…
Read the articleAzure AD – How many tenants?
Azure AD – How many tenants? A common question is – should we have a single tenant or more than one? The answer is…
Read the articlePrivileged Identities in Azure AD – Above Global administrators
Privileged Identities in Azure AD With this option, you can build up an Role-based Access Control (RBAC) solution on top of Azure AD roles, as…
Read the articleOAuth 2.0 Basics – Client Credentials Flow
What are client credentials in OAuth 2.0 ? It is a string value that contains a token. The token is sufficient for a resource…
Read the articleJWT vs SSL
The purpose of a JWT is NOT to encrypt data during transport (that’s SSL). JWT, using hashes, allows the receiving party to trust that…
Read the article