Azure AD – New capabilities for identity governance on Azure AD

You can now define policies to let your end-users requesting access to your corporate resources – from group membership to role permissions – either with automated or manual approval. At this stage, this is currently available only through private preview. You can register your interest here https://aka.ms/azureadidentitygovernancepreview

Read More

Intune – Display an enrollment status page

With the latest Intune update, you can now display an enrollment status page after a Windows 10 device has been registered. The page will let your end-users know what is happening while their device is finalizing the registration process. To do so, you first need to enable the feature in Intune Connect to your Azure portal and reach out the Intune configuration blade Then reach out the Device Enrollment\Windows Enrollment…

Read More

Azure AD – New SSO setup experience

An updated and refreshed experience is now available when setting up Single Sign On (SSO) when publishing application on Azure Active Directory (AAD). After adding a new application in Azure AD you need to setup how the authentication is going to be proceed and most of the time you are going to setup SSO. The new SSO setup experience is more intuitive and will let you test the setup before…

Read More

Azure/Windows 10 – You can use your Authenticator App to sign in

Going the same way than Windows Hello for Business, you can now use your Microsoft Authenticator app to sign in to your corporate resources protected by Azure AD (Azure, Office 365, Azure published apps…) You need off course few prerequisites: Running Windows 10, registered to your Azure AD tenant Have setup an authentication policy on your Azure AD Have register your Microsoft Authenticator app Setup the authentication policy on Azure…

Read More

Azure – Azure AD authentication available in preview for Azure Files

You may already know Azure Files service allowing you to use Azure as files ‘server’ and off course Azure AD to manage authentication to your Microsoft cloud services (Azure and/or Office 365). Well, good news, you can use Azure AD to leverage authentication to access Azure Files; meaning you can set NTFS like permissions on Azure Files. Off course the existing storage account key process is still supported and available.…

Read More

Azure AD – New location to manage guest and organizational relationship

Azure AD has been updated with a new configuration blade called Organizational Relationships.This new configuration blade is the new location to manage guest users permissions and invitations   You now have access to a comprehensive list of users from external organizations (guest) with the option (as you already from the users list) to create a new guest By the way the invitation email has been also updated to use your…

Read More

SCCM – Improvements for Azure AD Joined devices managed by SCCM

You may already be aware that the introduction of Azure Active Directory (Azure AD) integration with System Center Configuration Manager (SCCM) starts reducing the certificate requirements. Well, this integration has been updated (with the current release – build 1806 – this is still a preview) to allow Azure AD Joined devices managed by SCCM to communicate using HTTP with the SCCM environment through the cloud management gateway To implement this…

Read More

Azure – An updated interface for Azure AD Roles management

The Azure Active Directory Roles configuration blade has been updated to provide more details and management option for Azure AD Roles. Connect to your Azure administration portal (https://portal.azure.com) or Azure AD administration portal (https://aad.portal.azure.com) and reach out your Azure Active Directory blade or Then reach out the Roles and administrators blade At first sight it does not seems to had some changes but it has been updated; first, if you…

Read More

Azure / Office 365 – You can now use your Microsoft Authenticator mobile app for SSPR (preview)

The Self Service Password Reset, available with Azure AD and Office 365, has been updated to let your end-user use the Microsoft Authenticator mobile app when using the Self Service Password Reset (SSPR). First you need to enable this new capability from your Azure AD portal (https://aad.portal.azure.com/) or Azure portal (https://portal.azure.com) and reach the Password reset configuration blade Then go to the Authentication methods blade and enable the Mobile app…

Read More

Azure – New version of Azure AD Connect available for autoupgrade

If you have configured your Azure AD Connect (the directory synchronization tool for Azure AD and Office 365), a new version (1.1.880.0) has been made available. This version solves the issue with Azure AD Connect Health agent running 100% CPU – which was (incorrectly?) reported to be related to the Framework update. Also part of this update support for Windows Server 2019 Essentials and GA (general availability) of the integration…

Read More

Azure AD / Office 365 – Integration with LinkedIn is finally here

It has been announced some time ago already, but now the integration is finally here. You can now enable the LinkedIn integration with your Office 365 (Azure AD) tenant. NOTE the integration is turned off by default. To enable the feature, you need to logon to your Azure portal (https://portal.azure.com/) or your Azure AD administration portal (https://aad.portal.azure.com) Then go to your Azure AD configuration blade Access the User settings configuration…

Read More

Windows 10 – Error 0x80180014 when joining Windows 10 to Azure AD

I just got an interesting error when trying to join a Windows 10 1803 to Azure AD; I was continuously getting the error ‘0x80180014’ when trying to join the device to Azure AD. The interesting thing was this device has been already Azure AD Joined but has been reset, with all reference in Azure AD or Intune removed. Nonetheless, each time I tried to join again I was getting this…

Read More