Book Image

Mastering Identity and Access Management with Microsoft Azure - Second Edition

By : Jochen Nickel
Book Image

Mastering Identity and Access Management with Microsoft Azure - Second Edition

By: Jochen Nickel

Overview of this book

Microsoft Azure and its Identity and access management are at the heart of Microsoft's software as service products, including Office 365, Dynamics CRM, and Enterprise Mobility Management. It is crucial to master Microsoft Azure in order to be able to work with the Microsoft Cloud effectively. You’ll begin by identifying the benefits of Microsoft Azure in the field of identity and access management. Working through the functionality of identity and access management as a service, you will get a full overview of the Microsoft strategy. Understanding identity synchronization will help you to provide a well-managed identity. Project scenarios and examples will enable you to understand, troubleshoot, and develop on essential authentication protocols and publishing scenarios. Finally, you will acquire a thorough understanding of Microsoft Information protection technologies.
Table of Contents (23 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Using conditional access


In our first conditional access scenario, we will use the Azure AD functionality to secure Salesforce access with Azure MFA:

  1. Navigate to https://portal.azure.com and the Azure AD pane | Conditional Access.
  2. Click New policy:

Creating a Conditional Access policy

  1. Call the new policy Salesforce Protection.
  1. Under assignments, go to Include | All users:

User assignment options

  1. Under Cloud apps | Select apps, choose Salesforce:

Selecting the Salesforce app

  1. Under Conditions | choose Locations | Yes and Any location:

Choosing the location attributes

Note

As you can see, you have many conditions that can be set when you want to fulfill security requirements in the case of additional authentication or access control mechanisms. You can find more information at the following source: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/.

  1. Under Access controls, go to Grant.
  1. Choose Grant access | Require multi-factor authentication:

Using MFA for granting the access

  1. Enable...