Many organizations want to build applications that can read or manage Microsoft Teams meetings without exposing sensitive mailbox or calendar
Continue readingCategory: Security
Can Directory.ReadWrite.All Escalate Privileges in Entra ID? A Hands‑On Experiment.
Modern identity systems live or die by their privilege boundaries. In Microsoft Entra ID (formerly Azure AD), one of the
Continue readingGranular, Least‑Privilege RBAC for Entra ID Applications in Microsoft 365: A Practical Guide for Exchange & SharePoint
Modern Microsoft 365 environments demand precision, least privilege, and auditability. Yet many organizations still rely on broad Graph application permissions
Continue readingManage Cross Tenant Resources using Entra ID App with Federated Credential and Managed Identity
Think about a use case where you have two tenants – Tenant 1 (we call it Azure tenant with Azure
Continue readingFree TLS/SSL Certificate for App Service Web Apps with Custom Domains
Yes, it is FREE and you heard it correct! If you are using Azure App Services Web Applications with custom
Continue readingWhat’s the best practice to route traffic to internet from Azure Virtual Network?
Recently, I started a poll on LinkedIn asking experts to vote on egress to internet from Azure vNET, and among
Continue readingSecurity Research Lab
Security Research Lab is used for research and analysis of Azure AD authentication, permissions granted to Enterprise Applications, use of
Continue readingAWS Single Account (SSO) with Azure AD as External Identity Provider (IdP)
In this blog post, I would like to demonstrate how to use Azure AD as external identity provider (IdP) to
Continue readingAzure Purview Private Network Architecture and Lesson Learned
This is my 2nd Lab Experiment on Azure Purview with private network deployment architecture . You can read the 1st
Continue readingAWS Single Sign-On (SSO) with Azure AD as External Identity Provider (IdP)
Cloud Governance is top most priority of organizations moving (or moved) to Public Cloud. Identity and Access Management (IAM) is
Continue reading