Lekse lært - Hvordan FRID IKS løste AVD og Nerdio i et multi tenant - multi Azure scenario

FRID IKS (Fylkeskommunenes Ressurs for It og Digitalisering) er et interkommunalt selskap, som ble opprettet i forbindelse med oppløsningen av Viken fylkeskommune, og drifter nå både en felles management plattform samt Akershus, Buskerud, og Østfold fylkeskommuner. I denne sesjonen vil jeg sammen med arbeidsflate konsulenter fra FRID IKS fortelle om erfaringer fra hvordan vi løste implementering og forvaltning av Azure Virtual Desktop ved hjelp av Nerdio i et multiple tenant og multiple Azure subscription miljø.

Azure AD Authentication Fundamentals

Modern authentication in Azure AD can be used in a variety of forms, from human identities to non-human identities like devices, and workload identities like applications and managed identities. While supporting industry standards for AuthN and AuthZ like OIDC and OAuth2, as an Azure AD admin, IT ops or Developer, you have to know what to use when. This session aim to give you that fundamental knowledge!

Automate IAM and IGA with Microsoft Entra ID Governance - While I enjoy my Kölsch

With the combination of Inbound Provisioning API and Lifecycle Workflows in Microsoft Entra ID, the possibility of automating onboarding new employees to your tenant, and make sure they have access to the right resources for their job role through the whole employee lifecycle from employent, via job role changes and leaving, have never been bigger. As an Identity admin, you have often found your self performing manual tasks, both inside and outside work hours. Join me in this deep dive where I will show you how you can automate these scenarios, while you can lean back and your your deserved Kölsch!

Security Infrastrucure as Code for Entra ID and Graph API

This highly technical and demo-heavy session will look into the recently announced public preview (MS Build, May 2024) of the Graph resource support from Bicep, and compare usage scenarios to those already available via Terraform. We will look into how to combine traditional Azure resource deployments together with Entra ID and Graph API resources, moving even more deployment scenarios to declarative infrastructure-as-code, both for local deployment and for DevOps pipelines or actions.

Hi, I’m the Microsoft Entra Copilot for Security, how may I assist you today?

Using Microsoft Copilot for Security in Microsoft Entra can be of great assistance for Identity administrators, IT support, Security Analysts and more. Join this session for insights in the latest scenarios where Copilot for Security in Entra can be a valuable resource for anyone working with Microsoft Entra!

Access Entra Protected Resources without Secrets Using Workload Identity Federation

Workload Identity Federation using Microsoft Entra Workload ID opens up for a lot of scenarios for Microsoft Entra protected resources without needing to manage secrets secrets for service principals, and will increase your security posture as there are no secrets that can be exposed or exfiltrated.
In this deep-dive session I will focus on automating Infrastructure as Code deployments using Azure DevOps Pipelines and Github Actions, and how by using Workload Identity Federation this can be used so that you can connect to any Microsoft Entra protected resources without needing to manage secrets in your code.

Develop with Azure Infrastructure as Code using Bicep

Bicep is Microsofts native tool for declaring Infrastructure as Code and deploying Azure resources. In this session we will learn about how you can use Bicep both in your local development and using CI/CD pipelines in Azure DevOps or Github Actions to create deployment of your Azure resources, apps and services.

The Complete Guide to External Identities in Microsoft Entra

Have you ever heard about the Workforce Tenant Entra ID, or maybe Azure AD B2C or Microsoft's new offering for CIAM, the Entra ID for Customers Tenant? External Identities has evolved and is the new Guest! Or is it something completely different? Organizations might be well known with the B2B and Guest concept, but now more than ever you need to know the difference (or similarities) between internal & external members, guests, social logins, and what options there are for collaboration and application access between multiple tenants. The answer is Microsoft Entra External ID, but what is really the question??

User Lifecycle: Inbound Provisioning and Governance with Microsoft Entra ID Governance and Workflows

It all begins and ends with an Identity! Before the users and their devices can be managed, they need to be onboarded and provisioned with their user account. This is where Microsoft Entra Provisioning API and Lifecycle Workflows in Entra ID Governance enters the scene. By automating scenarios for Joiner, Mover and Leaver we can set up templates and tasks that for example automatically sends out a Temporary Access Pass for new hires which they can use for first time setting up their account and device to be securely managed! We can even implement custom tasks and extensions via Azure Logic Apps, that can trigger other APIs or even something you've built in Azure Functions! Learn how to use these lifecycle templates and customize tasks with serverless solutions in this awesome deep dive workshop where automation black belt Jan Vidar will share his best tips and tricks for implementing a successful Identity Governance that supports a seamless and automated user on- and offboarding!

Build your own Copilot using Azure Open AI and your data!

In this session I will show you how you can build your own Security Copilot Assistant in AI Studio, by using Azure Open AI, AI Search Service and your own data sources. We will learn how we can get data from Microsoft APIs like Graph API, and let users ask about security status and information in a natural language!

Increasing my Identity Security with Microsoft Security Copilot

Microsoft Security Copilot will be of important value for security teams, analysts and defenders in Organizations, building on OpenAI and integrating with Microsoft’s end-to-end security portfolio. But how can I as a user increase my identity security posture using Security Copilot?
In this session we will place us self as the end-user, and explore how and in which scenarios you as the end-user can access Security Copilot to understand and make your identity more secure!

Connect to any Azure AD protected API using OAuth2 and Custom Connectors

While there are hundreds of built-in connectors you can use in your Power Automate Flows or Power Apps, there are many scenarios where you would want to access API's like Microsoft Graph, or any other API that is protected by Azure AD. In this session I will show how you can access this using Custom Connectors and OAuth2, and my demo will show a self-built API using Azure Serverless solutions like Azure Functions and Logic Apps.

Getting started with Azure Infrastructure as Code with Bicep and TerraForm

In this session you will get up to speed with the 2 most important and popular options for Infrastructure as Code in Azure: Microsoft's own Bicep and Hashicorp TerraForm. Expect practical demos and takeaways you can start using in your organization today!

How to Secure Requests from one Serverless Solution to another using Managed Identities

From time to time when you build serverless solutions using Function Apps or Logic Apps, you need to call one from the other. In this session I will show how this request can be done securely, using Managed Identities and Azure AD to authenticate between them. In the demo I will show this both using Azure Functions and Logic Apps, and between them.

Knee-Deep Dive into Identity Governance and Lifecycle Workflows with Microsoft Entra Azure AD

It all begins and ends with an Identity! Before the users and their devices can be managed, they need to be onboarded with their user account. This is where Microsoft Entra and Lifecycle Workflows in Azure AD enters the scene. By automating scenarios for Joiner, Mover and Leaver we can set up templates and tasks that for example automatically sends out a Temporary Access Pass for new hires which they can use for first time setting up their account and device to be managed! We can even implement custom tasks and extensions via Azure Logic Apps, that can trigger other APIs or even something you've built in Azure Functions! Learn how to use these lifecycle templates and customize tasks with serverless solutions in this awesome deep dive where automation black belt Jan Vidar will share his best tips and tricks for implementing a successful Identity Governance that supports a seamless and automated user on- and offboarding!

Take aways:
Usage scenarios for Azure AD lifecycle workflows and why it is useful as part of a successful identity and device onboarding, as well as off-boarding.
How you can build Logic Apps for Custom Tasks to support your own Organizations needs for customized automation.
Why doing Identity Governance and Lifecycle Workflows will increase your Security Posture!

Securing Serverless APIs with Azure Active Directory and Azure Functions

This session will demonstrate how to build secure, serverless APIs using Azure Active Directory (AAD) and Azure Functions. Attendees will learn how to use AAD to authenticate and authorize access to their APIs, and how to use Azure Functions to build and deploy their API logic. We will also show how to use Logic Apps to integrate with other systems and services. By the end of this session, attendees will have a solid understanding of how to build and secure serverless APIs using Azure's serverless offerings.

Main Takeaways:
Learn how to use Azure Active Directory to authenticate and authorize access to your APIs
Understand how to use Azure Functions to build and deploy your API logic
See how to use Logic Apps to integrate with other systems and services
Gain knowledge on best practices of building and securing serverless APIs using Azure's serverless offerings

Demo Scenarios:
Building a simple "To-Do" API: In this demo, you could show how to use Azure Functions to build a basic "To-Do" API that allows users to create, read, update, and delete tasks. You could then show how to secure the API using Azure Active Directory, and demonstrate how to authenticate and authorize access to the API using AAD.

Integrating with an external system: In this demo, you could show how to use Logic Apps to integrate the "To-Do" API with an external system, such as a calendar or email service. You could show how to use Logic Apps connectors to connect to the external system, and demonstrate how to use Logic Apps to create workflows that integrate with the API.

Building a more complex API: In this demo, you could show how to use Azure Functions to build a more complex API that uses multiple functions and integrates with multiple external systems. You could demonstrate how to use Azure Functions features such as bindings and triggers, and show how to use Azure Active Directory to secure the API.

Implementing Role based access control: In this demo, you could show how to configure Azure AD to implement Role-based access control for the API. You could demonstrate how to assign roles to users and groups, and show how to use Azure AD to authorize access to the API based on the user's role.

Implementing Multi-Factor Authentication: In this demo, you could show how to configure Azure AD to implement Multi-Factor Authentication for the API. You could demonstrate how to use Azure AD to require MFA for certain users or groups and show how to implement the same for the API.

These are just a few examples of demo scenarios you could use to illustrate the concepts discussed in your session. Feel free to modify or adjust them to suit your specific needs.

Securing Logic Apps with Azure AD and OAuth2

Azure Logic Apps are increasingly beeing used for Serverless automation, orchestration, integration and reporting scenarios. Logic Apps can be triggered via HTTP requests, and you need to make sure that requests are secured, and in this session I will show you how you can protect Logic Apps using Azure AD and OAuth2 authorization policies.

Power Up Windows LAPS for Microsoft Entra Azure AD

Challenge: Security don't let users be administrators on their devices. Solution: Windows LAPS provide an Azure AD backed up local admin password via Intune. Power Up: Create a Power App that provides a secure interface using Logic Apps API that retrieves the users managed devices local admin password via Graph API. Value: Users happy and you rock!

Gamify Identity Security with Power Platform

If you want to motivate the users in your organization to do something, it's always a good idea with gamification where users can compete and compare with each other. In this session I will show how you can increase your identity security and awareness by using Power Platform and connecting to Security APIs in Microsoft Graph in a creative way. Demos will be shared so that you can start implementing in your organization right away.

Connect Power Platform to Azure AD Protected APIs using built-in HTTP connectors

There are several ways you can access the Azure AD Protected APIs in Power Platform Flows and Apps. Without creating Custom Connectors, which basically can connect to any REST based API that is available, it is useful to know what built-in HTTP connectors are available and can be used for delegated authentication to Azure AD Protected APIs like Microsoft Graph or other APIs. This session will provide you with all the answers you need to know to start exploring Azure AD Protected APIs using the built-in connectors that are ready for use for you today!

External Identities - Self-Service Sign Up, Governance and Workflow Automations

In this session we will look beyond the traditional Guest invitation process, and dive into how you can create Self-Service Sign Up user flows, and use Microsoft Entra External Identities and Azure AD Governance for Lifecycle management of External Identitites and Access scenarios. Expect technical deep dive demos!

Passwordless Azure Authentication using Managed Identities

Passwordless for Microsoft Identities is now the thing to do to secure your end users, but what about Azure Services that need to authenticate to other resources and APIs? This is where Managed Identities is the way to go. In this session I will show the capabilities and usage scenarios for using Managed Identities to get rid of application credentials once and for all!

How to Create an Azure AD Protected API in Azure in one hour!

Come and join this interactive session where I in just one hour will show you how you can create your own API in Azure and protect it with Azure AD using Oauth2. API's can be anything you want, and in true NIC spirit this session will really will be most about the demos and very little slides! This session is as much suited for IT pros as Devs. Hope to see you there!

Automate adding External Users for Power App using Graph in Power Automate

Finally Power Apps are now available for external users outside your organization! In this session we will show you how to automate the invitation process using Azure AD B2B and Microsoft Graph API in Power Automate. Key takeaway from this session is how you can empower your citizen developers and delegate invitations from inside their own workspaces. The session will be mostly demos and show a real life practical example of using this for a customer support portal.

Learn to Automate Identity Management like a Pro with Graph PowerShell!

If you work with Identity & Access Management in Entra ID (previously known as Azure AD), chances are you will regularly come up with scenarios where you'd say: "Hey, I should automate this!"
In this session Jan Vidar Elven will show you all his Pro tips on how to learn to automate with Entra ID, using Graph PowerShell SDK, because as we all (might) know, the Azure AD Windows PowerShell Module is going away soon! We will also look into how we can implement those automations with Serverless platforms like Azure Automation and Azure Functions, even DevOps Pipelines and Github Actions! Fasten your seatbelt, this will be a highly technical session with real life demo examples!

Power'ing up your Home Office Lights using Power Platform

Microsoft Power Platform can be used in a variety of creative ways to both learn and create awesome automation solutions, and you can even use this platform for your home automation. In this session I will show you how you can control your Home Office Lights (in my case Phillips Hue) via API and Power Platform components like PowerApps, Power Automate, Logic Apps and more.

Protecting Azure Serverless solutions with Azure AD

Serverless Automation solutions like Logic Apps and Azure Functions can be valuable tools for automating IT processes, much like Power Automate Flows automate user processes. While Flows run under the context of the calling user, Logic Apps and Azure Functions runs as itself. In this session we will look into how to add Azure AD Authentication and Authorization to these solutions, and how we can let end users call them securely and protected by Azure AD.

Manage Identity Lifecycle and Access Control with Azure AD Identity Governance

Being an Azure AD Administrator, a big part of your job is to manage identity lifecycle and make sure users have the right access at every time. With the new Azure AD Identity Governance we finally have a solution to manage both the lifecycle for your own users and for partner guests, lifecycle for resource access, and securely provide administrator access.
In this session we will deep dive into the Identity Governance solution consisting of Entitlement Management, Access Reviews, Privileged Identity Management and Terms of Use. The session will be practical and demo heavy, showing value and usage scenarios every Azure AD admin would want to know about!

Microsoft Graph 101

If you are curious about Microsoft Graph, this will get you started. Learn about the basics for querying the Microsoft Graph API, and how to use the Graph Explorer.

Microsoft Graph 101 - The Best Way to Get Started and Learn Graph is Using the Graph Explorer!

If you are curious and want to learn more about Microsoft Graph, this will get you started using the awesome Graph Explorer. In this session you will see how the best way to learn about what the Microsoft Graph can do for you is using the Graph Explorer, and the basics for querying the Microsoft Graph API. After this session you will definitely walk away wanting to try more yourself!

Microsoft Graph is something both developers and IT pros will benefit from learning more about, either they know nothing or something from before. This theater session will provide attendees a quick intro to Graph, the basics of queries and how Graph Explorer can be used as a great learning source.

Same old System Center.. but how can we hook up the Cloud and make it hot again!

System Center 2019 was released earlier this year, and for many of the solutions it was a bit "same old, same old..". But there are many possibilities where integrating with the Azure Cloud Platform can make System Center hot again!
Speakers Sam and Jan Vidar have been working with System Center since the early days, before even the Cloud became a thing. Let us show you how the Cloud can add value to your existing System Center investments!

Microsoft Graph 201

If you know a few things about Microsoft Graph, and wonder what to do next and how you can use it, this session will give you some great ideas on how to start using the Microsoft Graph in your own solutions.

Monitoring and Reporting on Activities and Security in Microsoft Entra Azure AD

There is a lot going on in your Azure Active Directory tenant, from user sign-ins to audit of changes, and you would want to make sure that you can get insights of how your apps and services are being used, potential risks, help with troubleshooting and any changes to your tenants configuration and both internal and external users. In this session we will look into how you can integrate Azure AD activity logs with Azure Monitor, and how you can view and create alerts and workbooks that provide valuable insights. We will also look into reports and the APIs you can use to get both monitoring and reporting data to any custom integration you will find useful. This session will be about demos and practical real life examples and scenarios you can bring home to your own environment!