Core Infrastructure and Security Blog

Options
724
wernerrall on May 20 2024 01:19 AM
1,295
Arnab Mitra on May 17 2024 07:27 AM
43.5K
Erin Chapple (BOURKE-DUNPHY) on May 14 2024 03:47 PM
1,948
Heinrich_Gantenbein on May 01 2024 08:47 AM
2,315
fbinotto on Apr 28 2024 11:45 PM
1,797
HoussemDellai on Apr 22 2024 09:00 AM
11.9K
Jerry Devore on Apr 15 2024 03:01 PM
3,661
WillAftring on Apr 08 2024 06:41 AM
3,684
BrandonWilson on Apr 06 2024 07:24 PM
2,357
PavelYurenev on Apr 04 2024 09:00 AM
5,209
hspinto on Apr 01 2024 12:00 AM
3,010
khgandhi on Mar 28 2024 09:46 AM
2,471
Bruno Gabrielli on Mar 21 2024 01:00 AM
15.4K
Paul Bergson on Mar 19 2024 04:30 AM
4,405
fbinotto on Mar 14 2024 01:30 AM
5,734
PaulHarrison on Mar 11 2024 03:00 AM
4,145
sairashaik on Mar 06 2024 06:01 PM
16.1K
Jerry Devore on Mar 04 2024 06:38 AM
25.1K
Jason Cody on Feb 29 2024 07:12 AM
4,650
jonasoh on Feb 26 2024 03:35 AM
3,104
BrandonWilson on Feb 21 2024 08:22 PM
38.5K
DagmarHeidecker on Feb 19 2024 04:15 AM
16K
BrandonWilson on Feb 18 2024 04:35 PM
5,846
Arnab Mitra on Feb 15 2024 11:59 AM
5,897
hspinto on Feb 12 2024 12:00 AM
15.9K
Paul Bergson on Feb 05 2024 04:13 AM
28.6K
Paul Bergson on Jan 29 2024 05:20 AM
4,099
Bindusar on Jan 23 2024 08:27 AM
7,143
Arnab Mitra on Jan 18 2024 08:50 AM
3,834
jonasoh on Jan 15 2024 03:31 AM

Latest Comments

Yes it should be ALL users, and for all you IT admins using old school user accounts as service accounts you are failing. You should be using MSA's or gMSA's get with the times people the bad guys are moving the goal posts not your users. Stop whining and lvl up.
0 Likes
I am happy Microsoft is embracing security. But this post leaves alot to be desired. What is the enforcement mechanism Microsoft will use to enforce this? What specific portals and tools will now require MFA? And perhaps most importantly, what about 3rd party MFA providers? We do not use Microsoft E...
0 Likes
Wow, the comments section is lit up like a Christmas tree with concerns and questions about this MFA requirement. I mean, I get it, MFA is like the new sheriff in town, but it seems like some folks are feeling a little handcuffed by the enforcement. I can almost hear the collective groans of IT admi...
0 Likes
I applaud better security. But unless they somehow can do MFA for portal work only (they stated it would also be CLI, PoSh), some models don't work. We need EntraID account tokens for the DevOps PAT management API. That cannot be a PAT itself or a Service Principal etc. And when MFA is enabled that ...
0 Likes
The announcement says that Microsoft is enforcing MFA for access to Azure administrative interfaces like the portal. I don't think it will affect Azure DevOps, but it would be good for Microsoft to confirm. But maybe those DevOps users should use MFA (enforced by CA policies) anyway to avoid the pos...
1 Likes