{"id":45350,"date":"2023-06-20T08:40:43","date_gmt":"2023-06-20T08:40:43","guid":{"rendered":"https:\/\/infrasos.com\/?p=45350"},"modified":"2023-08-15T12:28:39","modified_gmt":"2023-08-15T12:28:39","slug":"how-to-use-azure-ad-security-resources-to-secure-azure","status":"publish","type":"post","link":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/","title":{"rendered":"How to use Azure AD Security Tools &#038; Resources To Secure Azure"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"45350\" class=\"elementor elementor-45350\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-28190dd ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"28190dd\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1ed5715 ot-flex-column-vertical\" data-id=\"1ed5715\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f3dbca6 elementor-widget elementor-widget-text-editor\" data-id=\"f3dbca6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the <a href=\"https:\/\/infrasos.com\/azure-ad-security-assessment-evaluate-azure-ad-security-score\/\">Azure AD security<\/a> tools and resources you require to secure your cloud infrastructure? This article discusses these security tools and how to use them.<\/p><p>We also explore some <a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">Azure AD logs<\/a> for <a href=\"https:\/\/infrasos.com\/top-15-best-vulnerability-scanner-tools-in-cybersecurity\/\">detecting security vulnerabilities<\/a>. While these tools are great, there are third-party resources that offer better solutions.<\/p><p>In the last part of this article, we explain how our own <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-license-report\/\">InfraSOS Azure AD<\/a> <a href=\"https:\/\/infrasos.com\/azure-ad-monitoring\/azure-ad-guest-reports-auditing-tool\/\">monitoring and auditing tools<\/a> help secure your Azure cloud identity.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-fb7ed59 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"fb7ed59\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-655ccc3 ot-flex-column-vertical\" data-id=\"655ccc3\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-97750d3 elementor-widget elementor-widget-text-editor\" data-id=\"97750d3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-security-assessment-evaluate-azure-ad-security-score\/\">Azure AD Security Assessment: Evaluate Azure AD Security Score<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-dd91ed8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"dd91ed8\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-78c8bfa ot-flex-column-vertical\" data-id=\"78c8bfa\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6731fa9 elementor-widget elementor-widget-heading\" data-id=\"6731fa9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-large\">Built-in Azure AD Security Tools and Resources<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-43efa2f elementor-widget elementor-widget-heading\" data-id=\"43efa2f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">1. Role-based Access Control (RBAC)<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a9e253a elementor-widget elementor-widget-text-editor\" data-id=\"a9e253a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Cloud infrastructure security begins with the management of access to resources. Microsoft <a href=\"https:\/\/infrasos.com\/azure-ad-security-best-practices-for-remote-work-2\/\">Azure AD security<\/a> supports the &#8220;zero trust&#8221; paradigm to help organizations meet this essential security baseline.<\/p><p>This security principle says, &#8220;never trust, always verify.&#8221; In other words, &#8220;zero trust&#8221; promotes &#8220;least-privilege,&#8221; &#8220;thoroughly verify,&#8221; and &#8220;assume breach.&#8221;<\/p><p>The Azure <a href=\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\">role-based<\/a> access control is at the core of Microsoft&#8217;s &#8220;zero trust&#8221; Azure AD security implementation. It set the &#8220;least-privilege,&#8221; and &#8220;thoroughly verify.&#8221; baseline.\u00a0<\/p><p>To achieve this, <a href=\"https:\/\/infrasos.com\/azure-ad-roles-privileges-azure-ad-rbac-model\/\">Azure RBAC<\/a> <a href=\"https:\/\/infrasos.com\/azure-ad-roles-and-permissions-assign-manage-roles-for-users-groups\/\">assigns permissions to users<\/a> based on their roles in the infrastructure.\u00a0<\/p><p>To further simplify the process, Microsoft has about 60 built-in <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/permissions-reference\" target=\"_blank\" rel=\"noopener\">roles<\/a> in Azure Active Directory. However, if non of the existing roles meet your requirement, create custom roles.\u00a0<\/p><p>Regarding role assignments, assigning roles to users via groups and not directly to users is the best practice. It is vital to mention that assigning roles to an Azure AD group requires making it role-assignable while creating it. Once you create a group, this setting cannot be modified.\u00a0<\/p><p>You <a href=\"https:\/\/infrasos.com\/azure-ad-roles-and-permissions-assign-manage-roles-for-users-groups\/\">assign roles to a group<\/a> from the group&#8217;s &#8220;Assigned roles&#8221; menu.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ff314a8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ff314a8\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4c299fc ot-flex-column-vertical\" data-id=\"4c299fc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ff05905 elementor-widget elementor-widget-image\" data-id=\"ff05905\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"How to use Azure AD Security Tools &amp; Resources To Secure Azure\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU0MTcsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9BenVyZS1BRC1TZWN1cml0eS1Ub29scy1hbmQtUmVzb3VyY2VzLTEtUm9sZS1iYXNlZC1BY2Nlc3MtQ29udHJvbC1SQkFDLWFzc2lnbm1lbnQtdG8tZ3JvdXBzLW1ldGhvZC0xLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"440\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-768x440.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45417\" alt=\"How to use Azure AD Security Tools &amp; Resources To Secure Azure\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-768x440.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-1024x587.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-1536x880.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-720x413.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1.jpg 1593w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b1711f elementor-widget elementor-widget-text-editor\" data-id=\"3b1711f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Alternatively, Azure AD roles are assigned to a group via the &#8220;Roles and administrators&#8221; page.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b5a49e4 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b5a49e4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f00cc6f ot-flex-column-vertical\" data-id=\"f00cc6f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ee09b3c elementor-widget elementor-widget-image\" data-id=\"ee09b3c\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"1 Role-based Access Control (RBAC) assignment to groups method 2\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU0MjEsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC8xLVJvbGUtYmFzZWQtQWNjZXNzLUNvbnRyb2wtUkJBQy1hc3NpZ25tZW50LXRvLWdyb3Vwcy1tZXRob2QtMi5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"441\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2-768x441.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45421\" alt=\"1 Role-based Access Control (RBAC) assignment to groups method 2\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2-768x441.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2-1024x589.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2-1536x883.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2-720x414.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/1-Role-based-Access-Control-RBAC-assignment-to-groups-method-2.jpg 1597w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1043ebf ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1043ebf\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3db85c6 ot-flex-column-vertical\" data-id=\"3db85c6\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f7cf7c9 elementor-widget elementor-widget-text-editor\" data-id=\"f7cf7c9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-roles-privileges-azure-ad-rbac-model\/\">Azure AD Roles &amp; Privileges: Azure AD RBAC Model<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6ba39c1 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6ba39c1\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cee6ca3 ot-flex-column-vertical\" data-id=\"cee6ca3\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-fb6188d elementor-widget elementor-widget-heading\" data-id=\"fb6188d\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">2. Multifactor Authentication<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4127bd2 elementor-widget elementor-widget-text-editor\" data-id=\"4127bd2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The traditional username and password for authenticating a user is vulnerable to compromise. To reduce its vulnerability to this classic single-factor authentication method, Azure offers<a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\"> multi-factor authentications<\/a> to protect cloud resources. This involves requiring additional authentication beyond usernames and passwords.<\/p><p>Specifically, IT admins configure Azure AD to require verification via SMS sent to a phone. Additionally, it may request further biometrics (fingerprint or face scan) verification from a user.\u00a0<\/p><p>When Multifactor authentication is enabled by an Azure AD admin, users select these available <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/authentication\/concept-mfa-howitworks#available-verification-methods\" target=\"_blank\" rel=\"noopener\">verification methods<\/a> when they access <a href=\"https:\/\/myprofile.microsoft.com\/\" target=\"_blank\" rel=\"noopener\" data-linktype=\"external\">My Profile<\/a>.\u00a0<\/p><p>There are 2 options to enable <a href=\"https:\/\/infrasos.com\/office-365-mfa-enabled-vs-enforced-whats-the-difference\/\">MFA<\/a> in Azure Active Directory. Firstly, by enabling <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/fundamentals\/concept-fundamentals-security-defaults\" target=\"_blank\" rel=\"noopener\" data-linktype=\"relative-path\">security defaults<\/a>.<\/p><p>To enable security defaults, sign in to <a href=\"https:\/\/portal.azure.com\/\" target=\"_blank\" rel=\"noopener\">portal.azure.com<\/a> and open Azure Active Directory. After that, click\u00a0<strong>Properties<\/strong> on the <strong>Manage<\/strong> menu, then click &#8220;Manage security defaults.&#8221;\u00a0<\/p><p>Finally, to enable security defaults, select enable from the drop-down and save changes.<\/p><p>You cannot enable security defaults and use Conditional Access Policies simultaneously. Therefore, to use <a href=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\">Conditional Access<\/a> Policies, you must disable security defaults.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-edcfc13 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"edcfc13\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c44df6e ot-flex-column-vertical\" data-id=\"c44df6e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-072e956 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"072e956\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2-.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"enable MFA by enabling security defaults, step 2 -\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU0NzYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9lbmFiZS1NRkEtYnktZW5hYmxpbmctc2VjdXJpdHktZGVmYXVsdHMtc3RlcC0yLS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"438\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2--768x438.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45476\" alt=\"enable MFA by enabling security defaults, step 2 -\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2--768x438.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2--300x171.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2--1024x584.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2--1536x876.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2--720x411.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enabe-MFA-by-enabling-security-defaults-step-2-.jpg 1594w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ff2030e elementor-widget elementor-widget-text-editor\" data-id=\"ff2030e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Since you cannot use both, it is unsurprising that<a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\"> MFA is enabled via Azure AD<\/a> Conditional Access Policies.\u00a0<\/p><p>To enable the Multifactor authenticator using this method, search for and open &#8220;Conditional Access&#8221; in the Azure portal. After that, click &#8220;+ Create new policy.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-967af34 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"967af34\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c5b0283 ot-flex-column-vertical\" data-id=\"c5b0283\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7be3822 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"7be3822\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Enable Azure AD MFA via Conditional Access Policy\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU0ODYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9FbmFibGUtQXp1cmUtQUQtTUZBLXZpYS1Db25kaXRpb25hbC1BY2Nlc3MtUG9saWN5LmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"441\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy-768x441.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45486\" alt=\"Enable Azure AD MFA via Conditional Access Policy\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy-768x441.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1024x588.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1536x882.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy-720x413.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Enable-Azure-AD-MFA-via-Conditional-Access-Policy.jpg 1595w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f6f4e29 elementor-widget elementor-widget-text-editor\" data-id=\"f6f4e29\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>On the New Conditional Access policy page, give the name a name. Then, configure other aspects of the policy.<\/p><p>Click <strong>Grant\u00a0<\/strong>on the &#8220;Access controls&#8221; section, and choose &#8220;Grant&#8221; on the flyout (this is the default). Finally, to enable MFA, check the &#8220;Require multifactor authentication&#8221; checkbox and click Select.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-49ae691 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"49ae691\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c62bbaf ot-flex-column-vertical\" data-id=\"c62bbaf\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-00cefd7 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"00cefd7\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Security Tools and Resources - Enable Azure AD MFA via Conditional Access Policy 1\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU0ODcsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9BenVyZS1BRC1TZWN1cml0eS1Ub29scy1hbmQtUmVzb3VyY2VzLUVuYWJsZS1BenVyZS1BRC1NRkEtdmlhLUNvbmRpdGlvbmFsLUFjY2Vzcy1Qb2xpY3ktMS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"444\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1-768x444.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45487\" alt=\"Azure AD Security Tools and Resources - Enable Azure AD MFA via Conditional Access Policy 1\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1-768x444.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1-300x173.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1-1024x592.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1-1536x888.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1-720x416.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-Enable-Azure-AD-MFA-via-Conditional-Access-Policy-1.jpg 1596w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-255c174f ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"255c174f\" data-element_type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;bounceInRight&quot;,&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-72311603 ot-flex-column-vertical\" data-id=\"72311603\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-13ded1d6 elementor-widget elementor-widget-heading\" data-id=\"13ded1d6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Try our Active Directory & Office 365 Reporting & Auditing Tools<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-131e6de4 elementor-widget elementor-widget-text-editor\" data-id=\"131e6de4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #ff6600;\">Try us out<\/span> for <span style=\"color: #ff0000;\">Free<\/span>.\u00a0 100&#8217;s of report templates available. Easily customise your own reports on AD, Azure AD &amp; Office 355.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-22fcd53f ot-flex-column-vertical\" data-id=\"22fcd53f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-334c4bfe elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"334c4bfe\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"45350\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"334c4bfe\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-52ffe65 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"52ffe65\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-40ea61c ot-flex-column-vertical\" data-id=\"40ea61c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1d84406 elementor-widget elementor-widget-text-editor\" data-id=\"1d84406\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\">Setup Azure Conditional Access + Multi Factor Authentication MFA<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4ff71ee ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4ff71ee\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2696a5b ot-flex-column-vertical\" data-id=\"2696a5b\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-274d0b2 elementor-widget elementor-widget-heading\" data-id=\"274d0b2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">3. Azure AD Identity Protection <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-da834b4 elementor-widget elementor-widget-text-editor\" data-id=\"da834b4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><a href=\"https:\/\/infrasos.com\/azure-ad-identity-protection-detect-respond-to-identity-threats\/\">Identity Protection<\/a> protects cloud resources and allows organizations to detect and remediate identity risks automatically. The tool also provides data needed for risk investigation.\u00a0<\/p><p>There are 2 elements to achieve this. First, enabling the security policies that protect Azure AD identities.\u00a0<\/p><p>To achieve this first objective, Azure AD &#8220;Identity Protection&#8221; offers 3 policies &#8211; the &#8220;user risk policy,&#8221; &#8220;sign-in risk policy,&#8221; and &#8220;Multifactor authentication registration policy.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c3a293e elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"c3a293e\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"3. Azure AD Identity Protection\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU1MDksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC8zLi1BenVyZS1BRC1JZGVudGl0eS1Qcm90ZWN0aW9uLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"440\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection-768x440.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45509\" alt=\"3. Azure AD Identity Protection\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection-768x440.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection-1024x587.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection-1536x880.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection-720x413.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/3.-Azure-AD-Identity-Protection.jpg 1597w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b03ad45 elementor-widget elementor-widget-text-editor\" data-id=\"b03ad45\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To enable a policy, click on it. Ten configure the users the policy applies to by clicking Users in the <strong>Assignments<\/strong> section.<\/p><p>Next, select User risk tolerance, determine whether to block or grant access and require multifactor authentication.\u00a0<\/p><p>When you finish, enable and save the policy.\u00a0<\/p><p>Microsoft recommends creating user and sign-in risk policies using <a href=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\">Conditional Access<\/a> instead of the above methods.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cc0eb1f elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"cc0eb1f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Security Tools and Resources - 3. Azure AD Identity Protection\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU1NjIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9BenVyZS1BRC1TZWN1cml0eS1Ub29scy1hbmQtUmVzb3VyY2VzLTMuLUF6dXJlLUFELUlkZW50aXR5LVByb3RlY3Rpb24tMS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"441\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1-768x441.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45562\" alt=\"Azure AD Security Tools and Resources - 3. Azure AD Identity Protection\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1-768x441.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1-1024x588.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1-1536x882.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1-720x414.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1.jpg 1598w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0c7fb89 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0c7fb89\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f68e1b6 ot-flex-column-vertical\" data-id=\"f68e1b6\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e7c6616 elementor-widget elementor-widget-text-editor\" data-id=\"e7c6616\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The second element of Identity Protection is using <a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">logs to detect and remediate risks<\/a>. Hence, Azure AD security tool offers three logs.\u00a0<\/p><p>Firstly, it offers &#8220;Risky users&#8221; and &#8220;Risky sign-ins.&#8221; It also has two additional logs &#8211; &#8220;Risky workload identities&#8221; and &#8220;Risk detections.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf191e8 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"cf191e8\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Security Tools and Resources - 3. Azure AD Identity Protection\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU1NTgsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9BenVyZS1BRC1TZWN1cml0eS1Ub29scy1hbmQtUmVzb3VyY2VzLTMuLUF6dXJlLUFELUlkZW50aXR5LVByb3RlY3Rpb24uanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"441\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-768x441.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45558\" alt=\"Azure AD Security Tools and Resources - 3. Azure AD Identity Protection\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-768x441.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1024x588.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-1536x882.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection-720x413.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-3.-Azure-AD-Identity-Protection.jpg 1595w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4ff3d5e ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4ff3d5e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6a13f47 ot-flex-column-vertical\" data-id=\"6a13f47\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-dedf70e elementor-widget elementor-widget-text-editor\" data-id=\"dedf70e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-identity-protection-detect-respond-to-identity-threats\/\">Azure AD Identity Protection: Detect &amp; Respond to Identity Threats<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-aa52e70 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"aa52e70\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-08d675d ot-flex-column-vertical\" data-id=\"08d675d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bfddda1 elementor-widget elementor-widget-heading\" data-id=\"bfddda1\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\"> 4. Azure AD Conditional Access Policy<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ed68c7d elementor-widget elementor-widget-text-editor\" data-id=\"ed68c7d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Conditional Access policies evaluate conditions (<strong>signals<\/strong>) to make <strong>decisions<\/strong> that <strong>enforce<\/strong> an organization&#8217;s security policies. It is essentially an &#8220;if,&#8221; &#8220;then&#8221; policy.\u00a0<\/p><p>For example, if a user wants to access an application from a location, a policy may evaluate where the user is accessing Azure.\u00a0<\/p><p>If the policy sets a location condition, it checks that the user meets it. Then, the policy &#8220;Deny&#8221; or &#8220;Allow access&#8221; with additional conditions like requiring MFA.<\/p><p>In practice, what I described earlier as &#8220;<strong>signals,&#8221;<\/strong> &#8220;<strong>decisions,&#8221;<\/strong> and &#8220;<strong>enforce&#8221;<\/strong> are divided into Assignments and &#8220;Access controls&#8221; in a Conditional Access Policy.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-fa2108a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"fa2108a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-278eac1 ot-flex-column-vertical\" data-id=\"278eac1\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a8af7e2 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"a8af7e2\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"4. Azure AD Conditional Access Policy considers signals to decide enforcement of a policy\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU1OTMsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC80Li1BenVyZS1BRC1Db25kaXRpb25hbC1BY2Nlc3MtUG9saWN5LWNvbnNpZGVycy1zaWduYWxzLXRvLWRlY2lkZS1lbmZvcmNlbWVudC1vZi1hLXBvbGljeS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"438\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy-768x438.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45593\" alt=\"4. Azure AD Conditional Access Policy considers signals to decide enforcement of a policy\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy-768x438.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy-300x171.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy-1024x584.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy-1536x875.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy-720x410.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/4.-Azure-AD-Conditional-Access-Policy-considers-signals-to-decide-enforcement-of-a-policy.jpg 1609w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e7d3d7 elementor-widget elementor-widget-text-editor\" data-id=\"0e7d3d7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The <strong>Assignments<\/strong> section offer the option to configure control access based on who the policy applies to (users). Additionally, conditional access uses the &#8220;Cloud apps or actions&#8221; signal to determine which cloud app the policy or user actions trigger the policy.\u00a0<\/p><p>There is also the option to control access based on a device&#8217;s state, its platform (OS, for example), or a user&#8217;s location.\u00a0<\/p><p>Moreover, a Conditional Access policy has an <strong>Access controls\u00a0<\/strong>section with configurations determining whether to grant or deny access and\/or control access based on session conditions.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-05b74f4 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"05b74f4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-46e8f53 ot-flex-column-vertical\" data-id=\"46e8f53\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b1e2808 elementor-widget elementor-widget-text-editor\" data-id=\"b1e2808\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/using-conditional-access-policies-to-enhance-office-365-security\/\">Using Conditional Access Policies to Enhance Office 365 Security<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5e9c4e2 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5e9c4e2\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-158fd0a ot-flex-column-vertical\" data-id=\"158fd0a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-cd18893 elementor-widget elementor-widget-heading\" data-id=\"cd18893\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">5. Azure AD Privileged Identity Management<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-91b33c4 elementor-widget elementor-widget-text-editor\" data-id=\"91b33c4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Azure AD offers<a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\"> Privileged Identity Management<\/a> (PIM), a <a href=\"https:\/\/infrasos.com\/azure-ad-security-assessment-evaluate-azure-ad-security-score\/\">security feature<\/a> that allows granting and managing access to Azure resources. PIM limits privileged access to a specific period, after which the access expires.\u00a0<\/p><p>Moreover, PIM incorporates an approval process, which forces accountability. For instance, a justification must be provided before an approver grants requested privileged access.\u00a0<\/p><p>Additionally, Privileged Identity Management also supports conducting <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/privileged-identity-management\/pim-create-roles-and-resource-roles-review\" target=\"_blank\" rel=\"noopener\">access reviews<\/a> to ensure that users granted privileged access still need them.\u00a0<\/p><p>To learn how to set up PIM, read our article &#8220;Azure AD <a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\">Privileged Identity<\/a> Management: Manage &amp; Monitor Privileged Accounts.&#8221;\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e8c93a7 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e8c93a7\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4d932e2 ot-flex-column-vertical\" data-id=\"4d932e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ad06292 elementor-widget elementor-widget-text-editor\" data-id=\"ad06292\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/office-365-identity-access-manage-user-accounts-permissions\/\">Office 365 Identity &amp; Access: Manage Users &amp; Permissions<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-655bd58 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"655bd58\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2315635 ot-flex-column-vertical\" data-id=\"2315635\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4691a04 elementor-widget elementor-widget-heading\" data-id=\"4691a04\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">6. Azure AD Passwordless Authentication<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae62060 elementor-widget elementor-widget-text-editor\" data-id=\"ae62060\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Multifactor authentication\u00a0introduces an additional layer of authentication for users. This does not necessarily produce the best user experience.\u00a0<\/p><p>But what if there is a way to remove passwords and multifactor authentication and still secure an infrastructure? The good news is that this is achieved through passwordless authentication methods.\u00a0\u00a0<\/p><p>Azure Active Directory offers organizations three methods to avoid passwords (passwordless authentication) but keep their infrastructure secure.\u00a0<\/p><p>These include <a href=\"https:\/\/learn.microsoft.com\/en-gb\/azure\/active-directory\/authentication\/concept-authentication-authenticator-app\" target=\"_blank\" rel=\"noopener\">Microsoft Authenticator<\/a>, <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/security\/identity-protection\/hello-for-business\/hello-overview\" target=\"_blank\" rel=\"noopener\">Windows Hello <\/a>for Business, and <a href=\"https:\/\/learn.microsoft.com\/en-gb\/azure\/active-directory\/authentication\/concept-authentication-passwordless\" target=\"_blank\" rel=\"noopener\">FIDO2<\/a> security keys.<\/p><p>To enable the FIDO2 security key or Microsoft Authenticator passwordless authentication methods, search and open &#8220;Authentication methods&#8221; after signing in to <a href=\"https:\/\/portal.azure.com\/\" target=\"_blank\" rel=\"noopener\">portal.azure.com<\/a>.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c19d2a0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c19d2a0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3b0b103 ot-flex-column-vertical\" data-id=\"3b0b103\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ac4f619 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"ac4f619\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"enable passwordless authentication methods in Azure AD\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDU2NjksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA2XC9lbmFibGUtcGFzc3dvcmRsZXNzLWF1dGhlbnRpY2F0aW9uLW1ldGhvZHMtaW4tQXp1cmUtQUQuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"439\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD-768x439.jpg\" class=\"attachment-medium_large size-medium_large wp-image-45669\" alt=\"enable passwordless authentication methods in Azure AD\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD-768x439.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD-300x172.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD-1024x586.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD-1536x879.jpg 1536w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD-720x412.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/enable-passwordless-authentication-methods-in-Azure-AD.jpg 1608w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1b2a092 elementor-widget elementor-widget-text-editor\" data-id=\"1b2a092\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To deploy Windows Hello for business, read its <a class=\"tree-item is-leaf has-external-link-indicator\" role=\"treeitem\" href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/security\/identity-protection\/hello-for-business\/hello-planning-guide\" target=\"_blank\" rel=\"noopener\" data-bi-name=\"tree-leaf\">planning<\/a>, <a class=\"tree-item is-leaf has-external-link-indicator\" role=\"treeitem\" href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/security\/identity-protection\/hello-for-business\/hello-identity-verification\" target=\"_blank\" rel=\"noopener\" data-bi-name=\"tree-leaf\">deployment prerequisite<\/a>, and <a class=\"tree-item is-leaf has-external-link-indicator is-selected\" role=\"treeitem\" href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/security\/identity-protection\/hello-for-business\/hello-aad-join-cloud-only-deploy\" target=\"_blank\" rel=\"noopener\" data-bi-name=\"tree-leaf\">cloud-only<\/a> deployment guides.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-24cf0fd ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"24cf0fd\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9a7a7e2 ot-flex-column-vertical\" data-id=\"9a7a7e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-42e0f34 elementor-widget elementor-widget-text-editor\" data-id=\"42e0f34\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-monitor-azure-ad-activity-for-improved-security\/\">How to Monitor Azure AD Activity for Improved Security<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e25c942 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e25c942\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-be352db ot-flex-column-vertical\" data-id=\"be352db\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-098ae67 elementor-widget elementor-widget-heading\" data-id=\"098ae67\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Built-in Reporting Tools for Securing Azure AD Resources<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e40f0fb elementor-widget elementor-widget-text-editor\" data-id=\"e40f0fb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The security features we discussed in the last section protect Azure AD against potential attacks. However, enabling the features is not enough to<a href=\"https:\/\/infrasos.com\/top-10-best-ways-to-prevent-cyber-attacks-on-businesses\/\"> prevent cyberattacks<\/a>.\u00a0<\/p><p>After enabling the Azure AD security features and services, activity data (or logs) is required to evaluate the infrastructure&#8217;s security posture. Fortunately, Azure Active Directory provides <a href=\"https:\/\/infrasos.com\/analyze-azure-ad-security-logs-audit-monitor-azure-ad-activity\/\">various logs<\/a> to help achieve this objective.\u00a0<\/p><p>Check out configuring and using the various logs available in our article &#8220;How to Monitor Azure AD Activity for Improved Security.&#8221; It explains how to monitor audit and sign-in logs.<\/p><p>Also read &#8220;Analyze Azure AD Security Logs: Audit &amp; Monitor Azure AD Activity,&#8221; to learn how to analyse the logs discussed in the first article.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c6f5bc4 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c6f5bc4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3e07ff7 ot-flex-column-vertical\" data-id=\"3e07ff7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e60e689 elementor-widget elementor-widget-text-editor\" data-id=\"e60e689\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-group-reports\/\">See InfraSOS Office 365 Group Reports Tool<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-54a8a56 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"54a8a56\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0143f3c ot-flex-column-vertical\" data-id=\"0143f3c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-52c44d8 elementor-widget elementor-widget-heading\" data-id=\"52c44d8\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">How InfraSOS Reporting and Auditing Tool Secures Your Azure AD Resources<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a28b5 elementor-widget elementor-widget-text-editor\" data-id=\"69a28b5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>We have discussed various Azure AD security tools and resources. Additionally, we explored built-in <a href=\"https:\/\/infrasos.com\/office-365-management\/\">reporting tools<\/a> that provide data to make security decisions.<\/p><p>While these logs are great for assessing and detecting essential security vulnerabilities, they lack some details the third-party reporting tools provide.<\/p><p>In this section, we explore how our own <a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/direct-reports\/\">InfraSOS<\/a> <a href=\"https:\/\/infrasos.com\/azure-ad-monitoring\/\">Azure AD monitoring and reporting<\/a> tools provide robust information for making security decisions.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-59bb36a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"59bb36a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-553503d ot-flex-column-vertical\" data-id=\"553503d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-343ac85 elementor-widget elementor-widget-text-editor\" data-id=\"343ac85\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read <a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">See InfraSOS Office 365 Reporting Tool<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f18a0dd ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f18a0dd\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0256611 ot-flex-column-vertical\" data-id=\"0256611\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-086062b elementor-widget elementor-widget-heading\" data-id=\"086062b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">1. InfraSOS Azure AD Monitoring and Reporting Tools<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-37d66b2 elementor-widget elementor-widget-text-editor\" data-id=\"37d66b2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-license-report\/\">InfraSOS<\/a> Azure AD <a href=\"https:\/\/infrasos.com\/azure-ad-monitoring\/\">monitoring<\/a> and reporting solution, makes it easy to reduce the attack surface of your Azure Active Directory and Microsoft 365 infrastructure. It achieves these through several in-depth <a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/last-logon-report\/\">Azure AD reports<\/a>.\u00a0<\/p><p>InfraSOS provides customizable Azure AD <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-user-reports\/\">activity reports<\/a>. These include Azure AD Auditing and <a href=\"https:\/\/infrasos.com\/get-azureadauditsigninlogs-find-sign-in-logs-for-last-30-days-with-powershell\/\">Sign-ins logs<\/a>.\u00a0<\/p><p>Specifically, the InfraSOS Azure AD reports provides information like which admin added or modified a user or <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-group-reports\/\">group<\/a> and how many times admins reset passwords in the past 24 hours. Similarly, with the InfraSOS Azure AD Sign-ins logs, you determine which <a href=\"https:\/\/infrasos.com\/get-azureadauditsigninlogs-find-sign-in-logs-for-last-30-days-with-powershell\/\">users signed in within a specified date range<\/a>, did the sign-ins succeeded or failed, and why.\u00a0<\/p><p>Beyond viewing the reports, our tool allows you to schedule them to run and send you results via <a href=\"https:\/\/infrasos.com\/office-365-vs-g-suite-whats-the-best-email-provider\/\">email<\/a>. Moreover, it allows exporting reports to reports in CSV, pdf, xlsx, csvde, or HTML formats.<\/p><p>To learn more about all the features, visit the InfraSOS <a href=\"https:\/\/infrasos.com\/azure-ad-monitoring\/\">Azure AD monitoring<\/a> and reporting tools page.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-db57ebc ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"db57ebc\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5e3f9d6 ot-flex-column-vertical\" data-id=\"5e3f9d6\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-76fb3cb elementor-widget elementor-widget-text-editor\" data-id=\"76fb3cb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-configure-azure-ad-activity-logs-for-effective-monitoring\/\">How to Configure Azure AD Activity Logs for Effective Monitoring<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9b34acb ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9b34acb\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-121c69c ot-flex-column-vertical\" data-id=\"121c69c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-79e8c87 elementor-widget elementor-widget-heading\" data-id=\"79e8c87\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">2. InfraSOS Office 365 Monitoring and Reporting Tools<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bfdcf21 elementor-widget elementor-widget-text-editor\" data-id=\"bfdcf21\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-license-report\/\">InfraSOS<\/a> also offers <a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">Office 365 monitoring and reporting<\/a> tools. This SaaS tool gives you all you need to audit and analyse Microsoft 365 users, groups, and licenses and track <a href=\"https:\/\/infrasos.com\/how-to-check-if-mfa-is-enabled-in-office-365-for-users\/\">multifactor<\/a> authentication.\u00a0<\/p><p>With our Office 365 monitoring tools, organizations run reports on <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-user-reports\/\">blocked Azure AD user<\/a> accounts, get historical login information for a user, and find users that have never changed their<a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-password-reports\/\"> passwords<\/a>.\u00a0<\/p><p><a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">Sign-up<\/a> free to learn how the InfraSOS Office 365 monitoring and reporting tools improve the security of your Azure AD resources&#8217; security.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-61b0ca9 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"61b0ca9\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7ead58d ot-flex-column-vertical\" data-id=\"7ead58d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3c2551e elementor-widget elementor-widget-text-editor\" data-id=\"3c2551e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/best-practices-for-responding-to-azure-ad-security-incidents\/\">Best Practices for Responding to Azure AD Security Incidents<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-34993e0 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"34993e0\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8b9fa26 ot-flex-column-vertical\" data-id=\"8b9fa26\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-886ef74 elementor-widget elementor-widget-heading\" data-id=\"886ef74\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">How to use Azure AD Security Tools & Resources To Secure Azure Conclusion<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-704b49f elementor-widget elementor-widget-text-editor\" data-id=\"704b49f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Azure Active Directory has various built-in tools organizations require to secure their cloud identity infrastructure. In this article, we highlighted the features of six of these tools.\u00a0<\/p><p>Specifically, the article explained <a href=\"https:\/\/infrasos.com\/implement-azure-ad-role-based-access-control-policies\/\">Azure AD Role-based Access Control<\/a> (RBAC), <a href=\"https:\/\/infrasos.com\/how-to-enable-mfa-multi-factor-authentication-for-users\/\">multifactor authentication<\/a>, and <a href=\"https:\/\/infrasos.com\/using-azure-ad-identity-protection-to-monitor-user-activity\/\">Identity Protection<\/a>. Additionally, we discussed Azure AD <a href=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\">Conditional Access<\/a> Policy, <a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\">Privileged Identity Management<\/a>\u00a0(PIM), and Passwordless Authentication.<\/p><p>We also discussed how <a href=\"https:\/\/infrasos.com\/active-directory-reporting\/devices-reports\/\">InfraSOS<\/a> Azure AD and Office <a href=\"https:\/\/infrasos.com\/office-365-reporting\/\">365 monitoring<\/a> and reporting tools offer robust data that help organizations strengthen the security of their Azure AD infrastructure.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-61bd0a8 elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"61bd0a8\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-28b6bd6 ot-flex-column-vertical\" data-id=\"28b6bd6\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4fcbbdf elementor-widget elementor-widget-image\" data-id=\"4fcbbdf\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-37fbc3fe ot-flex-column-vertical\" data-id=\"37fbc3fe\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5fecbe96 elementor-widget elementor-widget-heading\" data-id=\"5fecbe96\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3af4b62a elementor-widget elementor-widget-text-editor\" data-id=\"3af4b62a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-33dee896 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"33dee896\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"45350\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"33dee896\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52019d9d elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"52019d9d\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS AD Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to secure your cloud infrastructure? This article discusses these security tools and how to use them. We also explore some Azure AD logs for detecting security vulnerabilities. [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[67,105],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to use Azure AD Security Tools &amp; Resources To Secure Azure<\/title>\n<meta name=\"description\" content=\"How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to use Azure AD Security Tools &amp; Resources To Secure Azure\" \/>\n<meta property=\"og:description\" content=\"How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-20T08:40:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-15T12:28:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-768x440.jpg\" \/>\n<meta name=\"author\" content=\"Victor Ashiedu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Victor Ashiedu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\"},\"author\":{\"name\":\"Victor Ashiedu\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6\"},\"headline\":\"How to use Azure AD Security Tools &#038; Resources To Secure Azure\",\"datePublished\":\"2023-06-20T08:40:43+00:00\",\"dateModified\":\"2023-08-15T12:28:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\"},\"wordCount\":1858,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"keywords\":[\"azure ad\",\"infraSOS\"],\"articleSection\":[\"Azure AD\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\",\"url\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\",\"name\":\"How to use Azure AD Security Tools & Resources To Secure Azure\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2023-06-20T08:40:43+00:00\",\"dateModified\":\"2023-08-15T12:28:39+00:00\",\"description\":\"How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to use Azure AD Security Tools &#038; Resources To Secure Azure\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6\",\"name\":\"Victor Ashiedu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g\",\"caption\":\"Victor Ashiedu\"},\"description\":\"Victor is an IT pro based in Manchester, UK. With over 22 years of experience managing Windows Server, Active Directory, and Powershell, and 7 years of expertise in Azure AD and Office 365, he's a seasoned expert in his field. When he's not working, he loves spending time with his family - a wife and a 5-year-old. Victor is passionate about helping businesses succeed in today's fast-changing tech landscape.\",\"sameAs\":[\"https:\/\/www.itechguides.com\/author\/victor-ashiedu\/\",\"https:\/\/www.linkedin.com\/in\/vashiedu\/\"],\"url\":\"https:\/\/infrasos.com\/author\/ashiedu5843\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to use Azure AD Security Tools & Resources To Secure Azure","description":"How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/","og_locale":"en_US","og_type":"article","og_title":"How to use Azure AD Security Tools & Resources To Secure Azure","og_description":"How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to","og_url":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2023-06-20T08:40:43+00:00","article_modified_time":"2023-08-15T12:28:39+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/06\/Azure-AD-Security-Tools-and-Resources-1-Role-based-Access-Control-RBAC-assignment-to-groups-method-1-768x440.jpg"}],"author":"Victor Ashiedu","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Victor Ashiedu","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/"},"author":{"name":"Victor Ashiedu","@id":"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6"},"headline":"How to use Azure AD Security Tools &#038; Resources To Secure Azure","datePublished":"2023-06-20T08:40:43+00:00","dateModified":"2023-08-15T12:28:39+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/"},"wordCount":1858,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"keywords":["azure ad","infraSOS"],"articleSection":["Azure AD"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/","url":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/","name":"How to use Azure AD Security Tools & Resources To Secure Azure","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2023-06-20T08:40:43+00:00","dateModified":"2023-08-15T12:28:39+00:00","description":"How to use Azure AD Security Tools &amp; Resources To Secure Azure. Do you want a deep dive into the Azure AD security tools and resources you require to","breadcrumb":{"@id":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/how-to-use-azure-ad-security-resources-to-secure-azure\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"How to use Azure AD Security Tools &#038; Resources To Secure Azure"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6","name":"Victor Ashiedu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g","caption":"Victor Ashiedu"},"description":"Victor is an IT pro based in Manchester, UK. With over 22 years of experience managing Windows Server, Active Directory, and Powershell, and 7 years of expertise in Azure AD and Office 365, he's a seasoned expert in his field. When he's not working, he loves spending time with his family - a wife and a 5-year-old. Victor is passionate about helping businesses succeed in today's fast-changing tech landscape.","sameAs":["https:\/\/www.itechguides.com\/author\/victor-ashiedu\/","https:\/\/www.linkedin.com\/in\/vashiedu\/"],"url":"https:\/\/infrasos.com\/author\/ashiedu5843\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/45350"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=45350"}],"version-history":[{"count":481,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/45350\/revisions"}],"predecessor-version":[{"id":49777,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/45350\/revisions\/49777"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=45350"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=45350"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=45350"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}