Posts

Showing posts with the label Other IT Ramblings

Hardware and Entra External ID: A New Way to Authenticate

Image
So, you’ve decided to automate your home. You pick up a Raspberry Pi, maybe an Arduino UNO or two, wire up some sensors, and start imagining all the dashboards and automations you’re about to build. But before anything even blinks or beeps, you hit your first roadblock: how do I control all of this? Naturally, you spin up a small Django web app, pull in a few Python libraries to talk to your Arduinos, and expose some endpoints. Great—now you can control your devices. But then the second roadblock hits: how do you access it securely? If you're an Azure‑first shop, the answer historically wasn’t great. For consumer‑grade IoT, TVs, or constrained devices, you’d often end up reaching for AWS Cognito or Okta because Microsoft simply didn’t offer a clean, standard way to authenticate on devices that can’t show a login screen. That gap just closed. Microsoft has introduced full support for the OAuth 2.0 Device Authorization Grant—a capability designed specifically for IoT devices, smart T...

What Microsoft 365 E7 Means for Identity

Image
Hey there! So if you have been active on LinkedIn for the past couple of days, you probably saw some rumors about a new licensing tier making it's way into Microsoft. Well, those rumors have since been confirmed by Microsoft to be true and in good ol' content creator fashion, you KNOW I had to make a post about it. Particularly, I want to talk about what this means for identity and what you can expect with this new tier in the Enterprise licensing model. For those in the identity space, E7 provides great new features that give admins the ability to avail of things not traditionally found in other enterprise license tiers below it. Without further ado, let's break into it! What Exactly Is E7 Bringing to the Identity Table? E7 isn’t just “E5 with extra seasoning.” It introduces capabilities that meaningfully shift how organizations can approach identity governance, insider risk, and privileged access. For identity folks, this tier finally bundles together a set of controls th...

Ensuring Compliance In Corporate Monitoring and User Data Collection

Privacy is something I take seriously. As our world becomes increasingly interconnected and the boundaries between work and personal life blur, organizations must understand what they can and cannot do when it comes to monitoring corporate assets and environments. If you’ve ever said something like: “It’s a corporate-owned device, so we can monitor whatever we want.” You’re wrong — and dangerously so. Before you deploy any monitoring tool, you should be familiar with the privacy laws in your province and at the federal level. The reality is far more nuanced than many IT teams realize, and the consequences of getting it wrong can be severe. This topic doesn’t get nearly enough attention, and that’s a problem for both users and administrators. So let’s talk about it. Corporate-Owned Device ≠ Unlimited Access A common misconception is that ownership of the device, the credentials, or the network gives an organization carte blanche to inspect anything it wants. Let’s be clear: it does...