May 24, 2021

Zero Trust Identity Controls - Essentials Series - Episode 2

8 minutes

Tour your identity options when moving to the Zero Trust security model. Our last Essentials episode gave a high-level overview of the Zero Trust security model principles: identity, endpoints, applications, networks, infrastructure, and data.

Join our host, Jeremy Chapman, as he unpacks the foundational layer of the model with identity. As the primary control plane for Zero Trust, it acts as the front door for people, service accounts, and devices as each requests access to resources. Identity is at the core of the Zero Trust concepts of never trust, always verify and grant the appropriate level of access through the principle of least privilege.

Verify Explicitly
Azure AD - easily implement additional protections to verify explicitly
Multi-factor authentication (MFA) - requires an additional authentication factor. Replace passwords with Microsoft Authenticator, Windows Hello, or FIDO2 keys.
Activity reports in the Authentication methods - see who’s capable of MFA and passwordless authentication, how many recent registrations and by type.
Usage - see the distribution of MFA sign-ins and by method, as well as the number of password changes and resets.

Least Privilege access
Conditional Access in Azure AD - uses real-time intelligence at the time of sign-in to assess the risk level, then blocks or grants access.
Built-in Insights and Reporting - expose the impact of enabled policies pre- and post enforcement.

► QUICK LINKS:

00:00 - Introduction
00:37 - Demo in Azure AD
01:47 - Azure AD Application Proxy
02:50 - How to set up multi-factor authentication
04:44 - Activity Reports for admins
05:21 - Least privileged access and conditional access
07:22 - Conditional Access Insights and Reporting
08:16 - Wrap up

► Link References:

For tips and demonstrations, check out our series at https://aka.ms/ZeroTrustMechanics

Learn more at https://aka.ms/zerotrust

► Unfamiliar with Microsoft Mechanics? We are Microsoft’s official video series for IT. You can watch and share valuable content and demos of current and upcoming tech from the people who build it at #Microsoft.

Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries?sub_confirmation=1

Join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog

Watch or listen via podcast here: https://microsoftmechanics.libsyn.com/website

► Keep getting this insider knowledge, join us on social:

...more