Posts by Category

azure-ad

The OAuth Token Flow and Token Theft

less than 1 minute read

Understanding the OAuth Token Flow and the risk of Token Theft.

Scoping Azure AD Roles with Administrative Units

less than 1 minute read

In Azure AD, an Administrative Unit is a collection of Users, Groups and Devices. These groupings provide a means to apply granular control in the assignment...

Granting Background App Services, Daemons and Scripts Delegated Permissions for Microsoft Graph

less than 1 minute read

Background services, daemons and scripts interacting with Microsoft Graph are commonly configured to acquire Application level permissions. Application admin...

B2C Federating to a Single Azure AD Tenant

less than 1 minute read

A B2C tenant that federates back to single Azure AD tenant supporting Members, Guests (B2B) and Customers (or Consumers).

Azure AD Group Writeback to On-Premises AD

less than 1 minute read

Using the Azure AD Connect Group Writeback feature to synchronise cloud groups to on-premises.

Azure AD On-Premises Application Identity Provisioning

less than 1 minute read

Azure AD Application Identity Provisioning to On-Premise Applications that lack SCIM support.

Azure AD Tenant Migration and Consolidation

3 minute read

A series of high-level steps for migrating an Azure AD O365 tenant with its users and data.

Analysing Application and Service Principal Objects

less than 1 minute read

Analysing Application and Service Principal objects.

AD FS Authentication with Azure AD

1 minute read

A means of enabling and disabling AD FS federation on an Azure AD custom domain name.

Back to Top ↑

scripts

Using PowerShell to Create HTML Emails

less than 1 minute read

Using PS and the .Net MailMessage class to create rich content html emails with embedded images and attachments for services like AWS SES and SendGrid.

Preconfiguring Authentication Methods for SSPR

less than 1 minute read

Empower newly onboarded users to utilise SSPR without needing to contact the IT Service Desk to set their first password.

Calling Microsoft Graph via PowerShell

less than 1 minute read

Microsoft Graph using the Invoke-RestMethod

Using MSAL.NET with PowerShell

less than 1 minute read

Example use of the PowerShell MSAL module.

Generating Random Passwords

less than 1 minute read

Creating a random password string using only PowerShell and .NET.

Back to Top ↑

microsoft-graph

Granting Background App Services, Daemons and Scripts Delegated Permissions for Microsoft Graph

less than 1 minute read

Background services, daemons and scripts interacting with Microsoft Graph are commonly configured to acquire Application level permissions. Application admin...