8 min read
Workspace Identity for Eventstream Sources: Retire the Shared Access Key
Eventstream can now read Azure Event Hubs with workspace identity. How to move off SAS keys, the RBAC each side needs, and when a service principal still wins.
Identity
16 articles
1 min read
Implementing Zero-Trust Security for AI Applications
Zero-Trust security ensures AI applications remain protected while enabling legitimate business use cases.
8 min read
Locking Down an Azure OpenAI Resource: Network, Identity, Keys, Logs
A security baseline for an Azure OpenAI preview resource in January 2023: private endpoints, Azure AD auth, customer-managed keys, logging and policy.
1 min read
Workload Identity Federation: Keyless Authentication from Anywhere
Instead of client secrets: 1. External identity provider issues a token 2. Token is exchanged for an Azure AD token 3. Application uses Azure AD token to…
1 min read
Identity-First Security: The New Perimeter
Identity-first security in 2021 meant rethinking how we control access. The tools are mature; the challenge is implementation discipline.
1 min read
Zero Trust Security in Azure: Trust Nothing, Verify Everything
1. Verify Explicitly : Always authenticate and authorize based on all available data points 2. Least Privilege Access : Limit user access with just in time…
2 min read
Azure AD Workload Identity for AKS: The Future of Pod Identity
Azure AD Workload Identity is the architecture-level improvement over AAD Pod Identity that removes the NMI DaemonSet and uses Kubernetes native service…
1 min read
Secure Azure Access with AKS Pod Identity
AAD Pod Identity was the original mechanism for giving Kubernetes pods an Azure AD identity so they could access Azure resources—Key Vault secrets, Storage…
1 min read
OAuth 2.0 Flows with Azure AD: Choosing the Right Flow
Flow Use Case User Interaction Authorization Code Web apps, mobile Yes Authorization Code + PKCE SPAs, mobile, desktop Yes Client Credentials Daemon/service…
1 min read
MSAL Libraries Deep Dive: Cross-Platform Authentication
MSAL handles: OAuth 2.0 protocol flows Token caching Token refresh Multi account support Conditional Access handling For APIs calling downstream APIs: MSAL…
1 min read
Microsoft Identity Platform: Modern Authentication for Developers
Azure AD : Identity provider OAuth 2.0 & OpenID Connect : Protocols Microsoft Authentication Library (MSAL) : Client libraries Microsoft Graph : API for…
1 min read
Azure AD B2B Collaboration: Secure Partner Access
Guests appear in your directory but authenticate elsewhere.
1 min read
Azure AD B2C Custom Policies: Advanced Identity Flows
User Flows: Pre-built, configurable through portal Custom Policies: XML-based, fully customizable
2 min read
Azure AD Conditional Access: Zero Trust Authentication Policies
Conditional Access is where the "never trust, always verify" principle of Zero Trust actually gets operationalised. Every sign-in to every app goes through…
1 min read
Microsoft Defender for Identity: Protecting Your Active Directory
The service identifies: Reconnaissance : Attackers gathering information about your environment Compromised credentials : Pass the hash, pass the ticket,…
1 min read
Azure AD B2C: Customer Identity Management
B2C handles the complexity of customer identity so you can focus on your application.