https://gotoguy.blog/categories/azure-ad-conditional-access/Azure AD Conditional Access - Category - GoToGuy BlogHugo -- gohugo.ioen-usFri, 04 May 2018 12:11:10 +0000https://gotoguy.blog/2018/05/04/how-to-configure-conditional-access-for-azure-ad-pim/Fri, 04 May 2018 12:11:10 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/05/04/how-to-configure-conditional-access-for-azure-ad-pim/Azure AD Privileged Identity Management is a really great security feature for controlling those Azure AD and Azure Subscription administrator roles. By implementing Azure AD PIM you can let users with admin roles elevate themselves when they need to, using just in time (JIT) and eligible roles instead of permanent admin roles. You can even implement approval workflows and audit trails, so if you haven’t looked into it you should really take a look!https://gotoguy.blog/2018/03/16/configure-azure-ad-authentication-for-project-honolulu-version-1803/Fri, 16 Mar 2018 07:03:01 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/03/16/configure-azure-ad-authentication-for-project-honolulu-version-1803/Just a few days ago a new version of Project Honolulu, technical preview 1830, was released for Windows Server Insiders, https://blogs.windows.com/windowsexperience/2018/03/13/announcing-project-honolulu-technical-preview-1803-and-rsat-insider-preview-for-windows-10/ . One of the major updates to that version was the support for changing access control from local group/Active Directory to Azure AD Authentication. Configuring Azure AD Authentication will provide the ability to pre-authenticate users with their Azure AD credentials, as well as restrict access to selected users or even integrate with Azure AD Conditional Access.https://gotoguy.blog/2017/09/24/secure-access-to-project-honolulu-with-azure-ad-app-proxy-and-conditional-access/Sun, 24 Sep 2017 22:10:28 +0000Jan Vidar Elvenhttps://gotoguy.blog/2017/09/24/secure-access-to-project-honolulu-with-azure-ad-app-proxy-and-conditional-access/Last week Microsoft announced Project “Honolulu”, the new Windows Server remote management experience, and now you can download a technical preview to install in your own data center, read here for more details: https://blogs.technet.microsoft.com/windowsserver/2017/09/22/project-honolulu-technical-preview-is-now-available-for-download/ . As the management is browser based, I thought this was a perfect fit for using Azure AD and publishing the management portal using Azure AD Application Proxy, and even better to secure the access using Azure AD Conditional Access.