security and compliance – All about Microsoft Endpoint Manager

Troubleshooting Azure MFA call to phone option missing (TwoWayVoiceMobile)

Posted on January 14, 2023 by Eswar Koneti | 0 Comments | 249 Views

Recently, while working on an office 365 hardening project, I came across an issue that was causing problems for many users in verifying the 2nd factor authentication (Azure MFA). During the 2nd factor authentication process, users were presented with the following screen. As you can see, the user has the option to verify their identity…

Powershell script to audit all Azure AD app registrations and notify secret key or certificate expiration

Posted on February 7, 2022 by Eswar Koneti | 1 Comment | 5,559 Views

This week, I have another real-time use case about the audit of all azure AD app registrations and notify the application credential (secret key or certificate) near to expiration. Registering an application in Azure AD establishes a trust relationship between your app and the Microsoft identity platform, The application registration can be used to authenticate…

Using filters to restrict security information registration from trusted devices

Posted on January 16, 2022 by Eswar Koneti | 0 Comments | 1,320 Views

It has been a while since Microsoft has released the combined registration (security) feature that helps users to register for both MFA and SSPR can register once if the methods in the Azure AD Multi-Factor Authentication and SSPR policies are enabled. For more information about Combined security information registration please read https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined One of the…

Qualys SAML integration with Azure AD

Posted on September 2, 2021 by Eswar Koneti | 0 Comments | 795 Views

Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing the content here. This article is about Azure AD integration with Qualys which is not formally documented with Qualys and is not listed as on Azure AD App gallery. That being said, not just Qualys but any…

Building controlled user identity with AzureAD (OAuthOpenID Connect)

Posted on August 18, 2021 by Eswar Koneti | 0 Comments | 367 Views

Note: This article was first published on www.procloudguru.com by Alpesh .Since the website is down, I am publishing it here. The reason behind writing of this blog is to share my view on how the traditional authentication/authorization can be modernized. Gone are the days of monolithic apps which shared a common security portal or user…

Using PowerShell – Retrieve the o365 audit logs for SharePoint sites

Posted on May 11, 2021 by Eswar Koneti | 0 Comments | 5,544 Views

I was recently working on assignment to get the audit logs for list of SharePoint online sites with specific audit activities such as PageViewed, FileAccessed, FileDownloaded,FileDeleted (This can be expanded further based on the needs) and email the data at regular intervals. For list of audited activities in office 365, https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide#audited-activities For list of page…