https://gotoguy.blog/categories/azure/Azure - Category - GoToGuy BlogHugo -- gohugo.ioen-usFri, 15 Sep 2023 12:31:36 +0000https://gotoguy.blog/2023/09/15/connect-to-microsoft-graph-in-azure-devops-pipelines-using-workload-identity-federation/Fri, 15 Sep 2023 12:31:36 +0000Jan Vidar Elvenhttps://gotoguy.blog/2023/09/15/connect-to-microsoft-graph-in-azure-devops-pipelines-using-workload-identity-federation/Microsoft recently announced that Workload Identity Federation for Azure Pipelines now is in Public Preview: https://devblogs.microsoft.com/devops/public-preview-of-workload-identity-federation-for-azure-pipelines/ . This opens for a lot of scenarios for Azure service connections, without the need to manage secrets for service principals and more security as there are no secrets that can be exposed or exfiltrated. As I work a lot with Microsoft Graph and automation, I wanted to see if and how I could use Workload Identity Federation to connect to and send queries to Microsoft Graph using Azure Pipelines.https://gotoguy.blog/2021/12/22/creating-an-azure-ad-protected-api-in-azure-in-a-school-hour/Wed, 22 Dec 2021 10:48:00 +0000Jan Vidar Elvenhttps://gotoguy.blog/2021/12/22/creating-an-azure-ad-protected-api-in-azure-in-a-school-hour/This blog post will accompany my contribution for Festive Tech Calendar 2021, where I on the 22nd of December will present a live stream & interactive session where I in just a school hour will show you how you can create your own API in Azure and protect it with Azure AD using Oauth2. API’s can be anything you want, but let’s keep it festive! This is some of the content I will cover in this blog post:https://gotoguy.blog/2021/04/14/presenting-at-norwegian-microsoft-365-community-meetup/Wed, 14 Apr 2021 13:09:30 +0000Jan Vidar Elvenhttps://gotoguy.blog/2021/04/14/presenting-at-norwegian-microsoft-365-community-meetup/I’m looking forward to speaking at the next Norwegian Microsoft 365 Community Meetup, where I will present the topic: State of Azure AD External Identities The meetup will be held in Norwegian language, with English presentation slides, and I will cover the following topics: What’s new in Azure AD External Identities? What is really the difference between B2B and B2C? When should you change pricing model from 1:5 ratio to MAU (Monthly Active Users)?https://gotoguy.blog/2021/02/22/speaking-at-scottish-summit-2021/Mon, 22 Feb 2021 22:41:56 +0000Jan Vidar Elvenhttps://gotoguy.blog/2021/02/22/speaking-at-scottish-summit-2021/I’m very much looking forward to speaking this Saturday 27th of February at the Virtual Scottish Summit 2021! This amazing Community conference will host 365 (!) virtual sessions from experts all over the world, ranging from first-time speakers to experienced community leaders. Sessions will be delivered in a range of tracks covering Microsoft technologies and community topics, something to choose from for everyone. My session will be about why it so important to have Zero Trust Admins with least privilege access, and why you start using Azure AD PIM (Privileged Identity Management) today!https://gotoguy.blog/2021/02/08/speaking-at-nordic-virtual-summit-2021/Mon, 08 Feb 2021 13:27:04 +0000Jan Vidar Elvenhttps://gotoguy.blog/2021/02/08/speaking-at-nordic-virtual-summit-2021/https://gotoguy.blog/2021/02/05/speaking-at-global-automation-bootcamp-2021/Fri, 05 Feb 2021 10:57:00 +0000Jan Vidar Elvenhttps://gotoguy.blog/2021/02/05/speaking-at-global-automation-bootcamp-2021/I’m happy to announce that I’m part of the amazing global initiative of automation bootcamps in starting from February 5th to 20th 2021! Update: The Azure Automation track has now been pushed back one week from February 20th to February 27th. I will speak about how Azure Serverless Automation solutions like Azure Functions, Logic Apps and more can be protected by Azure AD and how Power Platform can securely send requests to trigger your automation scenarios.https://gotoguy.blog/2019/12/18/azure-advent-calendar-2019-azure-information-protection/Wed, 18 Dec 2019 08:30:12 +0000Jan Vidar Elvenhttps://gotoguy.blog/2019/12/18/azure-advent-calendar-2019-azure-information-protection/Today is 18th December and my turn to being part of the awesome Azure Advent Calendar. Thanks to Gregor Suttie (@gregor_suttie ) and Richard Hooper (@Pixel_Robots ) for this great initiative. In today’s video, linked below, I’m speaking about Azure Information Protection (https://docs.microsoft.com/en-us/azure/information-protection/ ). I tried to keep the video under 30 minutes, but there is so much to talk about that I ended up doing a full 45 minute session.https://gotoguy.blog/2018/11/11/alert-on-on-premises-connectivity-for-self-service-password-reset-using-azure-monitor-and-azure-ad-activity-logs-in-log-analytics/Sun, 11 Nov 2018 12:07:21 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/11/11/alert-on-on-premises-connectivity-for-self-service-password-reset-using-azure-monitor-and-azure-ad-activity-logs-in-log-analytics/Recently I wrote a blog post on how to get started with integration of Azure AD Activity Logs to Azure Log Analytics. Setting up this is a requirement for the solution in this blog post, so make sure you have set this up first: http://gotoguy.blog/2018/11/06/get-started-with-integration-of-azure-ad-activity-logs-to-azure-log-analytics/ . In this blog post I wanted to show a practical example on how to create an alert for when Azure AD Self Service Password fails in password writeback because of connectivity error to the On-premises environment.https://gotoguy.blog/2018/07/11/using-the-azure-run-as-account-in-azure-automation-to-connect-to-azure-ad-with-a-service-principal/Wed, 11 Jul 2018 11:08:35 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/07/11/using-the-azure-run-as-account-in-azure-automation-to-connect-to-azure-ad-with-a-service-principal/If you are using Azure Automation and working with Runbooks for automating against your Azure subscription, you can create an Azure Run As Account for authenticating and logging in to your subscription. The Azure Run As Account is configured in your Automation Account, and will do the following: Creates an Azure AD application with a self-signed certificate, creates a service principal account for the application in Azure AD, and assigns the Contributor role for the account in your current subscription.https://gotoguy.blog/2018/07/09/azure-mfa-report-dashboard-in-azure-portal-the-good-the-bad-and-the-ugly/Mon, 09 Jul 2018 12:44:53 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/07/09/azure-mfa-report-dashboard-in-azure-portal-the-good-the-bad-and-the-ugly/If you are working with EMS and implementing Azure AD, Intune, MDM, MAM, Information Protection and more, you can build yourself some great dashboards in the Azure Portal using tiles and pin blades to your customized dashboard. This is an example from my own workplace: image Often when I work with projects implementing Identity & Access, Conditional Access and Azure MFA, I wish I could have a dashboard to report on MFA registration, and be able to pin that to my EMS dashboard as shown above.