Microsoft Entra ID Authentication Methods Explained

In this session I take a look at Microsoft Entra ID’s (Azure AD) various authentication methods, and discuss what are they are how they work. We’ll discuss the different types of authentication strengths and I’ll show you how to create your own customised policies. Furthermore I’’l show you how these phishing resistant methods can be used in tools like Conditional Access to further secure your users and your environment. Finally I’ll mention Security defaults, a great solution to secure a newly created tenant or in a situation in which admins are unsure about what settings to use.

Timecodes

00:00 Introductions
01:59 Entra ID Security Defaults Explained
03:16 Entra ID Authentication Options Explained
05:28 Default Password Policies explained
06:04 Password protection for Windows Server Active Directory
07:04 Creating a MFA Registration Campaign
08:17 Creating a Custom Authentication Strength & Conditional Access Implementation
11:53 Authentication Options Explained and how to implement
15:35 Exploring the Tenant Settings
16:15 Activity Reporting & Diagnostics
17:19 Conclusions

[davidasplund]

Hey Andy. i enjoy your video's. Thanks for share .

[timkatsapas]

I love the delivery and how you get your ideas across. Its great seeing you again - thank you for your content

[AndyKow]

Excellent video guide and great detail in explaining each option that is required.

[HeyTezza]

Awesome thank you, funnily enough I’m listening from Adelaide :)

[supriyochatterjee]

Excellent thanks for everything, Well explained concepts as always

[serdartokgoz]

Hey Andy, You are a great tutor. I enjoy and learn a lot while watching you. It would be fantastic if you record a video related password complexity policy. Thanks a lot

[sharathchandraa]

Hello I am glad to hear your sessions I want to know how to deploy 3rd party authentication methods on Azure

[kelseykong]

Thank you Andy for the informative explanation. May I know if you may have any recorded any video or will record one for companies that have the free license. I understand we can enable security default. I am wondering if we can disable security default, and still be using Per User MFA. Or that is not secure?

[HanSDevX]

I was just reading MFA complaints on reddit.

[fireside_talks]

Andy, how long do you expect for a custom authentication strength from setup to become available so you can pick it up in a conditional access policy?

[alexismartel]

what if I have conditional access policies already for MFA, is this going to overwrite conditional access?

[thobiasmakuwatsine]

Hey Andy, You are a great tutor i really enjoy your sessions. I have a question, Do you have any presentation on AD Reporting?

[MBRE]

Andy my menthor!! may i ask you, for a company of 5 persons recent born, would you suggest to start using Entra with all that follows, AD, conditional access...

[ensarguler]

If Security Details is enabled, but I want to create conditional access for 1 user to require security key to log in, would I lose the features of Security Defaults org-wide?

[fintoanto]

Hi, how to enable specific user ID app password? Is it required any specific license to do that?

[IronSlasher]

Confused about the Registration campaign, I see excluded users and groups, but I don't see Included? How do I target the campaign for just one group?😕

[thomassejerhansen]

Hi Andy. Great video.
Are all these settings included in all types of license or do we need an AD premium license?

[alexie]

The problem is that I can’t sign in to the authenticator app because i need the code. But the code stand on the authenticator. Have you idea how to solve this?

[thulanavimukthi]

Hi, I am new to Azure AD. I have a question. After sync Azure AD with ON Prem AD, lets say we are login to the azure AD with ON Prem Sync account. Can wee see the same configurations on the computer like applications, files etc once we logged in to the azure AD, which we were able to see when log in using ON Prem active directory?

[jradharaman]

Hi Andy I follow your channel. Like the way you explain about MS Ecosystem. We are a MS Partner in India and have one of our customer requirement : "How to allow sign in from only one device at a time. If user want to access from another device then he should first log out from the first device then he should be allowed to sign in from the 2nd device" They are using MS Business Basic and Entra P1 subscriptions at the moment. Please help with input. Regards