Branding your tenant with security in mind

In this quick and satisfying talk, you will learn why tenant branding is not only great for scoring points with the brand owner of the company and making things look familiar to the users. You will also learn why it is important from a security perspective.

You will see examples and fun alterations you can do to make your tenant stand out even more than what you might have in place today.and I will show you that you can even detect phishing using the branding CSS!

Azure AD sync: Optimizing for the future

Stepping into the future of synchronization, Azure AD Cloud Sync emerges as an innovative solution that offers improved speed and resilience, without compromising on features. Yet, how does it stack up against the established Azure AD Connect Sync engine? In this insightful session, delve into the world of Azure AD Cloud Sync and uncover its potential to revolutionize synchronization.

Our talk aims to elucidate the nuances of this new 'Cloud Sync' agent, presenting a clear comparison with the Azure AD Connect Sync engine. We'll unravel the secrets of effectively using both simultaneously, achieving enhanced performance and resilience while maintaining a feature-rich environment. Join us as we navigate the dynamics of Azure AD Cloud Sync, equipping you with the knowledge you need to leverage its full potential right away!

SSO to domain resources from Azure AD Joined Devices

In this session we will cover the basic concepts of Kerberos Authentication from Azure AD Joined Devices. An overview of the synced attributes that are required with the PRT to enable Kerberos and NTLM will help you understand if your environment is setup for SSO. We will also deep-dive in the logs, show some tools you can use to troubleshoot Kerberos and also demonstrate the requirement for SSO with Kerberos when using Windows Hello for Business. At the end of the session, viewers should have a good understanding of the mechanics of SSO to domain resources from Azure AD Joined Devices.

Cloud Kerberos Trust: The Ultimate SSO Solution for On-Prem Resources

Are you tired of juggling multiple login credentials for your on-premises resources? Well, we've got some good news for you! Microsoft MVPs Michael Mardahl and Ben Withmore are here to introduce you to the world of Cloud Kerberos Trust - the ultimate single sign-on (SSO) solution for your on-premises resources. With Cloud Kerberos Trust, you can use your Azure AD credentials and Windows Hello for Business to seamlessly access your on-premises resources. No more complicated Enterprise PKI systems, Azure AD takes care of the heavy lifting and converts your Windows Hello for Business sign-in into a Kerberos ticket. So join us for a fun-filled journey as we dive into the world of Cloud Kerberos Trust and explore its endless possibilities!

What you will learn:

- The evolution of Windows Hello for Business and how Cloud Kerberos Trust fits into the picture

- How to enable Cloud Kerberos Trust, with live labs and demos

- The ins and outs of Kerberos and how tickets play a crucial role

- Tips and tricks for troubleshooting broken Cloud Kerberos Trust configurations

This session will be developed by us, one we get confirmed for the event.
We promise to put on a good show!

PIM: Understanding Real-World Problems

Using Privileged Identity Management (PIM) with Entra roles is a good way to protect against the risks of privilege misuse and identity theft. But, is it perfect? This is something we can look at from different points of view.

We invite you to come and listen to the experiences and solutions shared by our community. This session will share stories and discussions about the challenges and successes with PIM. Whether you're thinking about starting to use PIM, or you're looking to improve how you're currently using it, our session will provide useful insights. Learn from the experiences of others on how to better manage and secure privileged identities in your organization.

As always I will buy lots of candy and find some swag for the audience so they have a great time no matter what, and want to always come back to the Summit. And now me and Jose will loose our jobs, because we share all the secrets of the community!

Modernising Authentication Methods like a Boss

In this session, we will explore the process of modernizing authentication methods in Azure AD, focusing on strategies and best practices for migrating away from the classic MFA and SSPR portals.

We will discuss the benefits of the new centralized management approach, such as improved security and simplified management, and how it can help organizations meet the changing needs of today's workforce.

Attendees will learn about key considerations for planning and executing a migration to the new Azure AD portal, including how to assess and prepare for the impact on users and IT staff.

We will also cover best practices for troubleshooting common issues and maintaining compliance during the transition.

This session will provide a detailed-level overview of the new centralized management approach and will be a demonstration and talk about authentication strategies.

This will be almost like a free consulting session, with tons of knowledge sharing and reassurances of how all the gears turn.

Intune Suite Cloud PKI Showcase - Exploring and Sharing Innovative Ideas

Come check out the session on Cloud PKI, part of Microsoft's Intune Suite. It will show you how easy and efficient it is to manage security certificates with this cloud-based tool. Expect to see how it works, its cool features, and how it makes handling certificates a breeze. This is great for anyone in IT who wants to up their security game. Keeping it chill and informative, so you can get a good look at what Cloud PKI can do for you.

Hoping that Microsoft keeps their promise for the launch date :D