Access reviews are tools that help organizations track the resource access life cycle. Some of the features of access reviews include the following: Figure 8.18 – The access reviews cycle [...]
In this section, we’ll cover how to plan and implement an access package in Azure AD. An access package, as previously stated, is a collection of resources and policies that [...]
Resolving authentication issues in Azure AD can be tricky, due to the number of authentication methods, sign-in methods, and other configurations that may be put in place. The first step, [...]
When setting up FIDO2-based authentication, you’ll follow a process similar to Microsoft Authenticator – updating the authentication policy to allow the method and then instructing users to self-register their security [...]
Microsoft’s recommended solution for password-less authentication is Windows Hello for Business. It’s designed for users that have their own dedicated PC. When logging in, the user presents a biometric or [...]
Many administrators and users are already familiar with the Microsoft Authenticator mobile device app, using it for MFA. The Authenticator app can also be used as a password-less sign-in option. [...]
Now that you have an understanding of the different password-less options available for Microsoft 365, let’s look at some information that will help you choose the appropriate solution. Table 7.1 [...]
Over the course of the last few chapters, you’ve learned a lot about identity, synchronization, and sign-in methods – all part of the Microsoft 365 foundation. In this chapter, we’ll [...]
After creating administrative units, you can review them and modify their members and administrators from either the Azure AD portal or the Microsoft 365 admin center under Roles | Administrative [...]
Administrative units are collections of users and devices that can be delegated to certain administrators. In on-premises AD, you can choose to delegate control of administrative functions, using the delegation [...]