Stian A. Strysse 🛡️

Stian A. Strysse 🛡️

@learningbydoing.cloud

Sr. Identity Architect - #learningbydoing 🛡️ Focused on #cloud, #identity, #cybersecurity, #devops, #automation, #Entra 🆔. Fixing it with code, sharing it in blogs 🚀 Blog: https://learningbydoing.cloud 💥 LinkedIn: https://linkedin.com/in/stianstrysse 🗞️

226 followers743 following26 posts

Connect-AzAccount with newest PS module does not redirect to browser sign-in as the older versions did. Now it’s a popup instead, which takes longer to sign-in with. Same with Connect-ExchangeOnline newest module, why this new behavior - anyone knows?

I keep hearing recommendations for excluding #Entra breakglass accounts from all CA policies - I don’t agree. They should be included in at least one single, special CA policy requiring phishing-resistant MFA (FIDO2), where only breakglass accs’ are included. Session policy too. Thoughts?

Stian A. Strysse 🛡️ reposted

Want to run roadrecon, but a device compliance policy is getting in your way? You can use the Intune Company Portal client ID, which is a hardcoded and undocumented exclusion in CA for device compliance. It has user_impersonation rights on the AAD Graph 😃

Funny thing is, 99% of the apps I’ve seen still using Azure AD Graph is Microsoft’s own apps 😬

🥩🥩Mr T-Bone tip!🥩🥩 Heads up, IT Pros! ⏰ Azure AD Graph API is retiring. Action required for a seamless experience! Let’s get you ready. 🚀 #AzureAD #CloudTech #MVPBuzz #EntraID #MicrosoftTechCommunity https://buff.ly/41l2vDe

I know at least some SaaS vendors use these EXO legacy tokens still, so good to stay updated on this with the coming deprecation.

I just read this cool blog post by @smsagent.bsky.social covering how to activate eligible PIM roles using PS MgGraph when CA policies require Auth Context, found in @merill.net’s epic #Entra newsletter. This problem has been bugging me! However, shouldn’t MgGraph add support for Auth Context CAPs?

smsagent.blogActivating PIM Roles that require MFA or Conditional Access Authentication Context with PowerShellFor some time, I’ve been activating and scheduling activations for Azure roles under Privileged Identity Management (PIM) using the Microsoft Graph PowerShell SDK. However recently we secured…

Stian A. Strysse 🛡️ reposted

So who wants a verified 'Microsoft' and 'Microsoft MVP' label on their profile and all the posts? I just finished setting up @bluesky.ms as a labelling service. Go subscribe to the label to start seeing labels on verified MVPs and Microsofties. 🧵👇

Stian A. Strysse 🛡️ reposted

Quick reminder to check out the #Microsoft community starter packs. We have new starter packs + starter packs updated with new folks. So hit up the page and update your follows so you can connect with more folks. Please add if I've missed any. bluesky.ms/starterpacks/

bluesky.ms🚀 Starter packs | Bluesky.msStarter packs in Bluesky are curated collections of folks to follow. These packs are created by the community and are a great way to get started with Bluesky. You can bulk follow the folks in the pack...

Stian A. Strysse 🛡️ reposted

Stian A. Strysse 🛡️ reposted

Do you remember the first big task you tackled with #PowerShell? How about the moment it all just clicked, that system administration shouldn't be about clicks? What drew you to #automation?

Stian A. Strysse 🛡️ reposted

With #Microsoft Ignite 2024 taking place this week in Chicago, US, I created an automated feed you can subscribe to, to join those sharing from people around the world attending and posting! Please Like>Share>Post, and Pin to your feeds! #msignite #microsoftignite #entra bsky.app/profile/did:...

You are up to date.