Token Resistance I ran into an interesting scenario yesterday during a tenant migration where users from tenant A were successfully migrated to Tenant B, but their accounts remained logged into Teams - even changing the user account names to their onmicrosoft.com domain and removing their Teams license wouldn't force them to log out… talk about … Continue reading Force Teams to Sign Out
Hybrid Azure AD Join and Conditional Access One of the cool features of Azure AD Conditional Access Policies is being able to require that machines be domain joined, essentially locking down your access to corporate devices only, and preventing non-managed or non-trusted devices from being able to access your business data. You can see from … Continue reading Troubleshooting Hybrid Azure AD Join
Microsoft has recently released conditional access policies in Azure AD Premium / Intune that will allow you to restrict access to SharePoint and OneDrive from non-managed devices. While this feature is still in preview (expected to go GA by the end of the year), I believe it'll go a long way to helping companies properly … Continue reading Limit OneDrive Access from Non-managed Devices
When trying to access the Azure AD admin portal from within Office 365 recently, I ran into the following error: Now, this shouldn't be an actual problem, as Office 365 is built on the Azure AD identity platform, and clicking on the link to the admin portal should just work properly - but then *should* … Continue reading Oops! Access to Azure Active Directory is not available
Scott Duffey has put together some excellent articles (four parts in total) around setting up Azure AD based CBA, and deploying certificates to mobile devices. It's worked really well as a guideline for me in setting up certificate based authentication in production environments - however, there's one scenario that isn't covered in these articles, and … Continue reading Add Azure AD Trusted Certificate Authority
Master & CmdR 