https://www.gettothe.cloud/category/identity/Latest Identity posts on GetToTheCloudHugoenThu, 01 Jan 2026 12:05:00 +0100https://www.gettothe.cloud/azure-local-local-admin/Thu, 01 Jan 2026 12:05:00 +0100https://www.gettothe.cloud/azure-local-local-admin/AzureAzure LocalIdentityInfrastructureOnpremisesIn Azure Local deployments, the default local administrator account is automatically renamed during setup to enhance security and reduce exposure to common attack vectors. This change aligns with best practices for privileged access management, ensuring that default credentials are never predictable. Administrators should document the new name securely and integrate it into compliance workflows to …https://www.gettothe.cloud/m365-tenant-to-tenant-avepoint/Mon, 10 Jul 2023 09:00:00 +0200https://www.gettothe.cloud/m365-tenant-to-tenant-avepoint/E-MailExchangeIdentityM365Tenant to Tenant MigrationTenant to Tenant migration are more common these days. Mergers and divestitures are struggling with multiple tenants. Using AvePoint Fly can be a solution to combine the tenants and have only one management place. A blog post with all the information you need.https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Tue, 06 Jun 2023 09:00:00 +0200https://www.gettothe.cloud/azure-active-directory-cloud-only-administrative-accounts/Azure Active DirectoryCloudIdentitySecurityComing from an on-premises environment, it can be hard how to setup administrative accounts. On-premises was the default to have certain permissions. In Azure Active Directory that is a bit changed. This blog explains how to approach and why you should use Cloud-Only administrative accounts.https://www.gettothe.cloud/m365-tenant-to-tenant-bittitan/Mon, 05 Jun 2023 09:00:00 +0200https://www.gettothe.cloud/m365-tenant-to-tenant-bittitan/Azure Active DirectoryE-MailExchangeIdentityM365Tenant to Tenant MigrationTenant to Tenant migration are more common these days. Mergers and divestitures are struggling with multiple tenants. Using BitTitan can be a solution to combine the tenants and have only one management place. Migrating with BitTitan and there documentation can be also a pain in the ass. A blog post with all the information you need.https://www.gettothe.cloud/microsoft-entra-secure-azure-ad-tenant/Thu, 11 May 2023 08:00:00 +0200https://www.gettothe.cloud/microsoft-entra-secure-azure-ad-tenant/Azure Active DirectoryIdentitySecuritySecuring your Azure Active Directory is more needed than ever. Microsoft Entra is the new Admin center for this. Learn how to set it up and secure your tenant more.https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/Thu, 04 May 2023 08:00:00 +0200https://www.gettothe.cloud/azure-get-notified-when-break-glass-account-is-used/AzureAzure Active DirectoryCloudIdentitySecurityA Break Glass Account is an emergency account that grants access to critical resources when regular credentials are unavailable. It plays a vital role in ensuring business continuity during a crisis and enables a response strategy for cybersecurity threats. Shared and privileged accounts are the two types of Break Glass Accounts, and their use must be controlled and monitored to avoid security …https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa/Tue, 18 Apr 2023 11:13:47 +0200https://www.gettothe.cloud/azure-secure-azure-virtual-desktop-with-mfa/AzureAzure Virtual DesktopIdentitySecurityLearn how to secure your Azure Virtual Desktop with conditional access and Azure MFA. Protect your organization from potential security attacks. Take steps now to create a powerful remote work environment for your users.https://www.gettothe.cloud/azure-active-directory-assessment-part-vi/Fri, 10 Mar 2023 11:57:43 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-vi/Azure Active DirectoryCloudIdentityMicrosoft Graph APIPowerShellIn this part we are going to get all RBAC roles for Azure Active Directory and their members. Some identities are Eligible and some are Active. An overview of the status is needed to see if there is no legacy permissions assigned.https://www.gettothe.cloud/azure-active-directory-assessment-part-v/Sun, 05 Mar 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-v/Azure Active DirectoryCloudIdentityMicrosoft Graph APIPowerShellIn this part we will get an export of the Conditional Access Policies and App Regsitrations and Enterprise Applications with there API permissions. Also the client secret or certificate information will be exported to get a good sight on it.https://www.gettothe.cloud/azure-active-directory-assessment-part-iii/Sat, 25 Feb 2023 12:00:00 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-iii/Azure Active DirectoryCloudIdentitySecurityStarting the assessment is to get all the users, groups and devices and their attributes.https://www.gettothe.cloud/azure-active-directory-assessment-part-ii/Fri, 24 Feb 2023 08:22:35 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-ii/Azure Active DirectoryCloudIdentitySecurityTo start the assessment, there is a need of an app registration with the correct permissions. Creating it through portal and with PowerShell and saving the connection details to an XML file.https://www.gettothe.cloud/azure-active-directory-assessment-part-i/Fri, 24 Feb 2023 08:22:02 +0100https://www.gettothe.cloud/azure-active-directory-assessment-part-i/Azure Active DirectoryCloudIdentitySecurityWith the use of Azure Active Directory and multiple administrator, the chance that it is going to be messy is big. To check if everything is correct created and managed, you can do an assessment.https://www.gettothe.cloud/azure-active-directory-cross-tenant-synchronization/Wed, 01 Feb 2023 09:30:36 +0100https://www.gettothe.cloud/azure-active-directory-cross-tenant-synchronization/Azure Active DirectoryIdentitySecurityThese days are more and more companies working in Azure Active Directory. They are using Azure AD Connect to synchronize those accounts from on-premises Active Directory to Azure Active Directory. When a company is acquiring a new company and they acquired company need to access the applications or data in the Target company, you could create guest users in Azure Active Directory for those users. …https://www.gettothe.cloud/m365-migration-exchange-inventory-v2/Fri, 27 Jan 2023 16:13:28 +0100https://www.gettothe.cloud/m365-migration-exchange-inventory-v2/CloudExchangeIdentityM365PowerShellBeing able to do a proper Exchange migration (on-premises to online or online to online), you will need a good inventory. Now we improved the scripting to speed it up.https://www.gettothe.cloud/azure-active-directory-authentication-policies/Tue, 24 Jan 2023 09:19:51 +0100https://www.gettothe.cloud/azure-active-directory-authentication-policies/Azure Active DirectoryCloudIdentitySecuritySSPR and MFA policies are changing. Security levels must increase. Microsoft has announced that legacy multifactor authentication and self-service password reset policies will be deprecated in January 2024. The new Microsoft Entra Admin center will provide with a wizard to migrate the legacy policies to the new Authentication methods policies.