Being an architect usually means that I do not usually take part in ongoing operational activities when an environment has gone live and therefore the days where I handle requests for new Azure AD account creations are supposed to be behind me but most of
One of the items I had on my to-do list was to create material that I could use to walk my colleagues through how our CSP tenant relates to our customers’ tenants and one of examples I wanted to include in the material was how
Having monitoring and alerting set up for failed login attempts to any identity directory services (e.g. on-premise AD and Azure AD) have always been important yet often times neglected for many environments I’ve worked in. Those who have worked with on-premise Active Directory would know
Problem You’ve completed configuring an Azure Function App with a PowerShell script that authenticates against Azure AD with Connect-AzureAD using a certificate but noticed that attempting to use the Test/Run button shows that the authentication fails with the following: The full error log output is
As a follow up to one of my previous posts: PowerShell script to assign users in an on-premise AD group to an Azure Enterprise Application’s Users and Groups https://blog.terenceluk.com/2022/02/powershell-script-to-assign-users-in-on.html A PowerShell script can be used to manually add user accounts to an Azure Enterprise Application’s
I’ve been working with a lot of automation in Azure lately and wanted to capture as many configuration activities I have gone through to share through my blog, and today’s post is to demonstrate how to set up a service principal with a secret that
Azure Active Directory administrators who have configured Enterprise Applications for Azure AD SSO would most likely have encountered the limitations of not being able to assign groups when granting access permissions due to not having Azure AD Premium P1 licenses. The cost of Azure AD
Problem You attempt to use the cmdlet Connect-AzureAd (after Import-Module AzureAd) to connect to Azure: Connect-AzureAds … but quickly notice that it fails with the following error: PS C:GitAzureAzure> Connect-AzureAD Connect-AzureAD: One or more errors occurred. (Could not load type ‘System.Security.Cryptography.SHA256Cng’ from assembly ‘System.Core, Version=4.0.0.0,
Duo has been one of the most common MFA solutions I’ve worked with over the past 5 years and most clients who have this as their MFA solution for on-premise services such as ADFS, tend to ask whether they can also use it for Azure
I find that getting to understand the differences between Azure AD Roles and Azure RBAC Roles with respect to the following levels are often overlooked or misunderstood: Tenant Root Management group Subscription Those who have not yet had the opportunity to be exposed to larger
