SecureCloudBlog

julkaissut Joosua Santasalo 28 toukokuun, 2021 0

Using PowerShell to find dangling Redirect URI’s in Azure AD Tenant

julkaissut Joosua Santasalo 25 marraskuun, 2020 0

app service AZSK Azure express-validator expressJS HelmetJS NodeJS Web Application Firewall web apps

Defence in depth: Securing Azure App Service with Azure Front Door WAF, NodeJS runtime Security enhancements tested with OWASP ZAP

I’ve been recently playing around with Azure Front Door, and it’s WAF Policies. Here are some notes I decided toLue lisää

julkaissut Joosua Santasalo 2 elokuun, 2020 0

AAD Azure Azure AD Application Proxy Azure Security Center Functions NodeJS

Developer experience on steroids with Azure AD App Proxy and Azure Functions Host

I’ve been using Azure AD App Proxy a lot in my time and I continue finding it useful in newLue lisää

julkaissut Joosua Santasalo 20 heinäkuun, 2020 1

Azure Azure Security Center Containers docker Functions Logic Apps NodeJS Security Center

TOP3 Picks from Azure Security Center Standard

I was recently discussing with a another Azure Aficionado about value proposition of Security Center Standard in comparison to stayingLue lisää

julkaissut Joosua Santasalo 8 kesäkuun, 2020 5

AAD AADSTS50020 App Registrations Azure AD External Identities B2B B2C B2X

Azure AD B2X is here ! (yes B2X, not B2C or B2B) – Debugging and insights

Now that we are past the click-bait title (B2X), lets dig into Azure AD External Identities which was unveiled atLue lisää

julkaissut Joosua Santasalo 14 toukokuun, 2020 0

AAD App Registrations custom claims grant-type:jwt-bearer Group Claims NodeJS OAuth2 SAML saml1_1-bearer

Deep Diver – Azure AD Groups/Roles claims for developers and IT pro’s with code examples

Background Many enterprise applications rely on group /role information to be passed on assertions for authorization, and further role decisions.Lue lisää

julkaissut Joosua Santasalo 3 helmikuun, 2019 0

AAD Azure AD Device Login AzureAD Conditional Access Exchange HMA Hybrid Hybrid Modern Authentication MFA OAuth2 Office 365 Password Sync Productivity SAML

Lab: Zero Trust Exchange 2016 with AAD oAuth2 and SAML (KEMP)

Welcome to the four part lab (1/4) regarding implementing ”Zero Trust”, or identity perimeter-ish controls for your’re hybrid environment: FirstLue lisää