Securing Identity with Zero Trust
summary
Hands-on Azure demo configures Azure AD Identity Protection, Conditional Access, and Privileged Identity Management to secure identities; requires Azure AD Premium. Policies shown: user-risk and sign-in-risk quarantine, MFA registration enforcement, conditional rules that block legacy auth, prompt MFA for external sign‑ins and skip MFA for hybrid Azure AD‑joined devices. Live lab proves behavior: external login is blocked or challenged, domain‑joined login succeeds, GitHub SSO redirects to Azure AD, and PIM role is activated on demand.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 0:35Agenda
- 2:22Guiding Principles
- 9:49Components of Zero Trust
- 11:10Why do we require Zero Trust
- 13:48Zero Trust Security Model
- 14:18Enabling SSO for Applications
- 15:36Conditional Access
- 17:15Trusted Locations
- 17:52JustInTime Access
- 19:49Azure AD Password Protection
- 21:02Azure App Security Integration
- 22:22Conclusion
- 22:55Demo
- 23:20QA Session
- 24:55Demo Agenda
- 26:20Azure Identity Protection
- 29:32Azure Conditional Access
- 34:42Disable Legacy Authentication
- 36:30Integration with GitHub
- 40:59Privileged IAM Demo
related talks
51mMeasures for Securing Privileged Users in M365&Azure Every Organization Should Take
49mTop 5 ways to secure Azure resources
40mZero Trust in a Post-pandemic World
37mSecure Remote Access With Boundary and Azure AD
20mUnderstanding Zero Trust security
34mZero Trust Best Practices in Government and Federal Industries
01h 01mFive best Azure Access Control practice
40mBuilding Privacy-Resilient Identity