Scug 1809 Take conditional access to the next level
•Download as PPTX, PDF•
0 likes•54 views
How to move Conditional Access to the next level. - How to get a device compliant with Intune - How to monitoring your login - What is Baseline policy: Require MFA for admins (Preview) - and why care about it
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Scug 1809 Take conditional access to the next level
Similar to Scug 1809 Take conditional access to the next level (20)
More from Per Larsen
More from Per Larsen (20)
Recently uploaded
Recently uploaded (20)
Scug 1809 Take conditional access to the next level
- 1. Welcome Take Conditional Access to the next level
- 2. Per Larsen Microsoft MVP - Enterprise Mobility @Perlarsen1975
- 3. Conditional Access with EMS Protect the front door - Conditional Access Baseline policy: Require MFA for admins (Preview) Monitor you login Conditional Access rules
- 4. Protect the front door - Conditional Access
- 5. Require MFA Allow access Deny access Force password reset****** Limit access Controls On-premises apps Web apps Users Devices Location Apps Conditions Machine learning Policies Real time Evaluation Engine Session Risk 3 10TB Effective policy
- 6. IF Privileged user? Credentials found in public? Accessing sensitive app? Unmanaged device? Malware detected? IP detected in Botnet? Impossible travel? Anonymous client? High Medium Low User risk THEN Require MFA Allow access Deny access Force password reset****** Limit access High Medium Low Session risk What if tool
- 7. Let’s have a closer look Conditional Access
- 8. Baseline policy: Require MFA for admins (Preview)
- 9. What you should know • Applies to all Azure AD tenant • Most privileged Azure AD roles • Managed Service Identity (MSI) or service principals with certificates. As a temporary workaround, you can exclude specific user accounts from the baseline policy. • Disable legacy authentication - POP, IMAP, older Office desktop client.
- 10. Let’s have a closer look Baseline policy: Require MFA for admins (Preview)
- 12. Azure Active Directory Activity
- 13. Azure Active Directory Activity
- 14. Azure Active Directory Activity
- 15. Let’s have a closer look Azure Active Directory Activity
- 17. What is compliance ??
- 18. Compliance policy • Windows • Android • IOS • MacOS • Jamf
- 19. Let’s have a closer look Compliance policy
- 20. Conditional Access with EMS Protect the front door - Conditional Access Protect Admin accounts Monitor you login and compliance level Have the right rules that enforce your corporate security policy
- 21. Thank you
Editor's Notes
- About the presenter: Please do not hesitate to ask questions during the presentation, we will have a Q&A at the end of the presentation but I prefer a open dialog and see where it will take us About me: Microsoft MVP - Enterprise Mobility, Solution Architect, Technical Lead Microsoft Enterprise Mobility Suite (EMS) and Microsoft Partner Technology Solutions Professional (P-TSP) Co-Owner of Everything Windows User Group Denmark Find me: E-mail: per.larsen@atea.dk Phone: +45 3078 1828 Follow me: Twitter: https://twitter.com/perlarsen1975/ LinkedIn: https://www.linkedin.com/in/perlarsen1975/ Join me: Everything User Group Denmark: http://ewug.dk
- http://aad.portal.azure.com
- While managing custom conditional access policies requires an Azure AD Premium license, baseline policies are available in all editions of Azure AD. The directory roles that are included in the baseline policy are the most privileged Azure AD roles. Global administrator SharePoint administrator Exchange administrator Conditional access administrator Security administrator If you have privileged accounts that are used in your scripts, you should replace them with Managed Service Identity (MSI) or service principals with certificates. As a temporary workaround, you can exclude specific user accounts from the baseline policy. Baseline policies apply to legacy authentication flows like POP, IMAP, older Office desktop client.
- 2/10/2019
- 2/10/2019
- 2/10/2019
- Thank you