Premium Management and Protection of Identity and Access with Azure AD

Size: px

Start display at page:

Download "Premium Management and Protection of Identity and Access with Azure AD"

Todd Hampton
7 years ago
Views:

1 Premium Management and Protection of Identity and Access with Azure AD Jan Vidar Elven

2 Jan Vidar Elven Enterprise Mobility MVP Cloud and Datacenter Skill Microsoft

3 KEY TAKEAWAYS Protect Admin Roles Assess Risks and Vulnerabilities for Users Monitor Azure AD Health Use Azure MFA Conditionally

4 Azure AD Premium Offerings Manage Azure AD administrator role access On-demand admin access Real-time risk event & vulnerability detection, and Mitigation Policies Monitor and gain insights Second layer of security

5 Requirements For Privileged Identity Management + Identity Protection + Connect Health: Azure AD Premium P2/EMS E5 Global Administrator Access to Configure End Users: Azure AD Premium/EMS and Password Writeback for Policy Mitigation

7 Extend enterprise-grade security to your cloud and SaaS apps Microsoft Cloud App Security Intune Azure Active Directory Identity Protection Manage identity with hybrid integration to protect application access from identity attacks Protect your data, everywhere Azure Information Protection Protect your users, devices, and apps Detect problems early with visibility and threat analytics Advanced Threat Analytics Users Privileged Identity Management Administrators

through alerts, audit reports and access reviews Global Administrator Billing

8 CLOUD-POWERED PROTECTION Discover, restrict, and monitor privileged identities Enforce on-demand, just-in-time administrative access when needed Provides more visibility through alerts, audit reports and access reviews Global Administrator Billing Administrator Exchange Administrator User Administrator Password Administrator Classified as Microsoft General

9 CLOUD-POWERED PROTECTION How time-limited activation of privileged roles works SECURITY ADMIN Users need to activate their privileges to perform a task ALERT MFA is enforced during the activation process Configure Privileged Identity Management Alerts inform administrators about out-of-band changes Users will retain their privileges for a preconfigured amount of time Security admins can discover all privileged identities, view audit reports and review everyone who has is eligible to activate via access reviews USER Identity verification MFA ADMIN PROFILES Billing Admin Global Admin Read only Service Admin Monitor Audit Access reports PRIVILEGED IDENTITY MANAGEMENT Classified as Microsoft General

10 Azure AD Privileged Identity Management (PIM) Key Features: Access Review Enable on-demand, "just in time" administrative access Reports on access history and administrator assignments Alerts about access and configurations to a privileged role

11 Configure Azure AD PIM Sign in Azure Portal with Global Administrator Select New > Security + Identity > Azure AD Privileged Identity Management for your Azure AD tenant First admin will be: Security administrator Privileged role administrator

12 Demo - Azure AD Privileged Identity Management

Enabling organizations to control access based on risk Gain insights from a consolidated view of machine learning based threat detection Infected

calculation Risk-based conditional access automatically protects against suspicious logins and compromised credentials Machine-Learning Engine

13 Enabling organizations to control access based on risk Gain insights from a consolidated view of machine learning based threat detection Infected devices Brute force attacks Configuration vulnerabilities Leaked credentials Suspicious signin activities Remediation recommendations Risk severity calculation Risk-based conditional access automatically protects against suspicious logins and compromised credentials Machine-Learning Engine Risk-based policies MFA Challenge Risky Logins Change bad credentials Block attacks Use the power of Identity Protection in PowerBI, SIEM and other monitoring tools

15 Azure AD Identity Protection Key Features: Risk event detection and risk accounts Investigate risk events Risk-based conditional access policies: Sign-in risk policy User risk policy (not for federated users in preview) MFA registration policy

16 Demo - Azure AD Identity Protection

17 Azure AD Connect Health Features: Azure AD Connect Health for Sync Azure AD Connect Health for ADFS/WAP Azure AD Connect Health for AD DS (Preview)

19 Configure Azure AD Connect Health Get Azure AD Premium Download, Install & Register Connect Health Agent: AD FS/Proxy/WAP Health Agent AD DS Health Agent Azure AD Connect Server (>=version ) Go to

20 Demo - Azure AD Connect Health

21 Azure Multi-Factor Authentication (MFA) MFA Versions: MFA for Office 365 MFA for Azure Admins Azure MFA Features: Selected Authentication Methods Admin Control

22 Demo - Azure Multi-Factor Authentication

23 Summary Takeaways: Protect Admin Roles Assess Risks and Vulnerabilities for Users Monitor Azure AD Health Use Azure MFA Conditionally Contact: Blog:

24 17:15 18:15 Closing Note Hasain Alshakarti, Marcus Murray

Microsoft Azure Multi-Factor authentication. (Concept Overview Part 1)

Microsoft Azure Multi-Factor authentication (Concept Overview Part 1) In this Document we will discuss the concept of Azure Multifactor Authentication (MFA) concept, when and how you can use it and what