body { -ms-overflow-style: scrollbar; overflow-y: scroll; overscroll-behavior-y: none; } .errorContainer { background-color: #FFF; color: #0F1419; max-width: 600px; margin: 0 auto; padding: 10%; font-family: Helvetica, sans-serif; font-size: 16px; } .errorButton { margin: 3em 0; } .errorButton a { background: #1DA1F2; border-radius: 2.5em; color: white; padding: 1em 2em; text-decoration: none; } .errorButton a:hover, .errorButton a:focus { background: rgb(26, 145, 218); } .errorFooter { color: #657786; font-size: 80%; line-height: 1.5; padding: 1em 0; } .errorFooter a, .errorFooter a:visited { color: #657786; text-decoration: none; padding-right: 1em; } .errorFooter a:hover, .errorFooter a:active { text-decoration: underline; } #placeholder, #react-root { display: none !important; } body { background-color: #FFF !important; }

JavaScript is not available.

We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using twitter.com. You can see a list of supported browsers in our Help Center.

Terms of Service Privacy Policy Cookie Policy Imprint Ads info © 2023 Twitter, Inc.

Follow

Click to Follow JefTek

Jef Kazimer

@JefTek

Principal Product Manager

#MicrosoftEmployee #SpacesHost #Microsoft #Entra #Identity #AzureAD - Tweets are my own

Technology CompanyChicago, ILcloudid.spaceJoined February 2007

2,757 Following

3,735 Followers

Jef Kazimer’s Tweets

Pinned Tweet

Over the weekend I did some testing of the new #MSGraph SDK PowerShell module v2 preview using managed identity for automating identity tasks such as cleaning up unredeemed invited B2B users and wrote it up here. #azuread #identity #powershell cloudid.cc/UaotaI2J

Using Managed Identity with MS Graph SDK PowerShell Module v2 preview

read image description

ALT

16

43

Jef Kazimer Retweeted

Join us on the upcoming live audio event on Twitter Spaces where we'll be talking about migrating from Windows Server 2012 R2 with guest Jeff Woolsey

from the Windows Server product team at #Microsoft. #windows #server #security #Identity twitter.com/i/spaces/1YpKk

Migrating from Windows Server 2012 R2 Live QnA

read image description

ALT

1

12

21

Jef Kazimer Retweeted

Did you know you can check how many Authentication #MFA prompts your users are getting? In #AzureAD -> Workbooks -> Authentication Prompts Analysis workbook.

7

10

Jef Kazimer Retweeted

What your Azure AD Conditional Condition have been doing lately? Additional monitor view that touches on real-life identity and allows you to know the conditions field, filter views, etc. #azuread #aad #entra #security #identity

1

7

Jef Kazimer Retweeted

Know the field - use access review. Guests, external objects, and priv access are on the rise. Therefore, you should know who is access to which platform and disable it automatically with Entra. #azuread #aad #entra #security #identity

2

13

As platforms change at cloud speed, we have also added a What's Deprecated page with the What's New page to help you stay on top of all the things you need to be aware of! #AzureAD #Entra cloudid.cc/AzureAD/WhatsN

learn.microsoft.com

What's deprecated in Azure Active Directory? - Microsoft Entra

Learn about features being deprecated in Azure Active Directory

2

12

30

Jef Kazimer Retweeted

Alright, let's talk kerberos encryption types again. In Windows-land we understand five of them. DES_CBC DES_MD5 RC4 AES128-SHA1 AES256-SHA1 We don't talk about DES. They aren't interesting and are off by default. So we really have three in primary use.

9

57

259

Show this thread

Jef Kazimer Retweeted

Excited to announce the new integration between

and

@MicrosoftTeams

. Become a meeting power user with the official MS Teams Stream Deck plugin! #MicrosoftTeams

11

22

86

Jef Kazimer Retweeted

Stian A. Strysse

If you still use ADFS it’s about time to look into migrating to Azure AD auth. Get peace of mind with less on-premises infrastructure, less attack surface and better security. Microsoft have a migration guide, look below 👇🏻

Quote Tweet

Want guided assistance to migrate away from #ADFS but unsure where to start? Check out our AD FS Migration Deployment guide to help navigate the migration process and address top-of-mind questions related to the entire migration process. 425.show/ADFSGuide #ADFS2AAD #cloud

5

12

Join us on the upcoming live audio event on Twitter Spaces where we'll be talking about migrating from Windows Server 2012 R2 with guest Jeff Woolsey

from the Windows Server product team at #Microsoft. #windows #server #security #Identity twitter.com/i/spaces/1YpKk

Migrating from Windows Server 2012 R2 Live QnA

read image description

ALT

1

12

21

Jef Kazimer Retweeted

Merill Fernando

Yesterday's Twitter Space was 🔥🚀! Here's a short clip where

shared some of the things the

team look for when a compromise happens. Listen to the whole show at twitter.com/markmorow/stat Past shows 👉 425show.com/spaces

Embedded video

Quote Tweet

Mark Morowczynski (@markmorow@infosec.exchange)

twitter.com/i/spaces/1vOxw

9

42

Jef Kazimer Retweeted

Jordan Benzing - MVP

@JordanTheITguy

If you work in #Security and have #Azure if you haven't taken a look at this you should: learn.microsoft.com/en-us/azure/ac Doing periodic access review is expensive and requires lots of steps wouldn't it be cool if you could make it be way less painful? #Identity #AccessManagement

learn.microsoft.com

What is entitlement management? - Azure AD - Microsoft Entra

Get an overview of entitlement management and how you can use it to manage access to groups, applications, and SharePoint Online sites for internal and external users.

1

13

39

Jef Kazimer Retweeted

Think migrating from ADFS to Azure AD is too hard or not even possible?

and the rest of our ADFS migration team would to show you how! Signup for one of their upcoming workshops here: techcommunity.microsoft.com/t5/community-e

3

44

133

Jef Kazimer Retweeted

Rolling out this month - the official Microsoft Teams plugin for Stream Deck 👏🎉

104

330

1,442

Jef Kazimer Retweeted

I had a really great time jumping in with

,

and

. If you joined thanks so much for listening, hopefully it was valuable! The recording is below if you want to listen in, and a heap of great resources are available in the thread too.

Quote Tweet

Mark Morowczynski (@markmorow@infosec.exchange)

twitter.com/i/spaces/1vOxw

4

7

39

Jef Kazimer Retweeted

Stian A. Strysse

Our little family grew from 3 to 4 a few weeks ago, so naturally I haven’t had free time to write blog posts lately. 😅 Which is why I’m reposting a few old but relevant posts. Getting started with Microsoft Graph: learningbydoing.cloud/blog/getting-s #learningbydoing

learningbydoing.cloud

Getting started with Microsoft Graph

Let's go from zero to somewhat hero by getting familiar with topics like REST API, JSON, HTTP methods, access tokens, permission scopes, Graph Exporer, Powershell SDK and more in this blogpost series...

1

8

49

Jef Kazimer Retweeted

Merill Fernando

Replying to

Tip #7:

recommends orgs use the guidance on this page and define their own Enterprise Access Model learn.microsoft.com/en-us/security

Enterprise access model illustration

read image description

ALT

1

2

8

Jef Kazimer Retweeted

Mark Morowczynski (@markmorow@infosec.exchange)

Starts in about an hour!

Quote Tweet

Mark Morowczynski (@markmorow@infosec.exchange)

Hey folks, @JefTek, @merill and I are back next week with @reprise_99 discussing what type of things he’s seeing out there and things he wishes people would do. Learn from others mistakes! twitter.com/i/spaces/1vOxw

1

1

I uploaded the recording + the links shared during the live event last week to our archive page! Thanks to those who joined, and the feedback it was a useful session, so share the link! 425show.com/spaces #security #passwordless #identity #azuread #microsoft

Passwordless Event

read image description

ALT

3

7

Jef Kazimer Retweeted

Still using ADFS? It's time to reconsider. Azure AD offers richer capabilities, improved security, built in monitoring and detailed logging! For help planning your move, check out this awesome new guide on migrating from ADFS to Azure AD: setup.microsoft.com/azure/migrate-

9

85

295

Jef Kazimer Retweeted

SwiftInSecurity

@SwiftOnSecurity

❗️❗️❗️ If you want an inside peek at what Microsoft themselves see in IT breeches they are called into, which is everything big in the news (and not), these presentations are candid and directly from engineers. I'll be there. Wed Feb1st 4PM Pacific or get a reminder below.

Quote Tweet

Mark Morowczynski (@markmorow@infosec.exchange)

Hey folks, @JefTek, @merill and I are back next week with @reprise_99 discussing what type of things he’s seeing out there and things he wishes people would do. Learn from others mistakes! twitter.com/i/spaces/1vOxw

3

13

89

Show this thread

The recording from the #passwordless Linked In Audio event is now live at 425.show/AudioEventReco I had to do some cleaning up of the audio so it took some time to publish it! Give it a listen and feel free to follow up with any questions! #microsoft #security #fido2 #identity

Quote Tweet

Already a few hundred attendees have signed up for the Passwordless Live Q&A happening tomorrow! Have questions? Have you signed up for it yet? #passwordless #security #MFA #entra #azuread #office365 #identity #securitykeys #FIDO2 #passwords linkedin.com/events/whyyous

Passwordless Workshop

read image description

ALT

1

1

10

Jef Kazimer Retweeted

Replying to

1

3

Jef Kazimer Retweeted

Mathematica Ken

@MathematicaKen

Just noticed you no longer have to set FIDO2 key identifiers per Tenant - it can be used per application via the CA policy scoping. Kinda Nice if you need FIPS specific keys for some app scenarios but want to allow other keys on the tenant.

4

10

Jef Kazimer Retweeted

Merill Fernando

Do you work with Microsoft Graph, Graph Explorer and Graph PowerShell? I shared some of my productivity tips at the last Microsoft Identity Platform Community Call. The recording is on YouTube. youtube.com/watch?v=R4QdFd Read on below for a quick summary 🧵👇🏾

Productivity Tips for working with Microsoft Graph and Graph PowerS...

This month’s in-depth topic: Productivity Tips for working with Microsoft Graph and Graph PowerShell. Reviewed current tools and documents for working eff...

7

130

355

Show this thread

Jef Kazimer Retweeted

Alexander Filipin

Replying to

and

I updated my gist with some notes regarding V1 vs V2 and cross-linked to Jef's post and some people may be looking at that gist too.

gist.github.com

Azure Automation Managed Identity Graph Access

Azure Automation Managed Identity Graph Access. GitHub Gist: instantly share code, notes, and snippets.

1

2

7

Jef Kazimer Retweeted

PowerShell V2 module, more robust with separation of Beta cmdlets

devblogs.microsoft.com

Microsoft Graph PowerShell v2 is now in public preview, half the size and speeds up automation

Try the new preview version of the Microsoft Graph PowerShell SDK v2, with new features and improvements to automate your work.

1

11

32

Can someone catch me up on how library books are bad for children? Maybe I am old, I recall how it was a treat to go to a library, pick out books, learn new things, expand our minds through imagination and wonder. Or maybe that is the problem? This feels like 1950s, not 2020s twitter.com/the_transit_gu

This Tweet is unavailable.

1

7

Jef Kazimer Retweeted

Michael Warburton

@MichaelWarbur17

Very possibly the greatest piece of timing in Television history as JAMES BURKE introduces with glorious precision the launching of Voyager 2 in 1977.

Embedded video

From

Michael Warburton

120

1,062

5,916

Jef Kazimer Retweeted

I'm pretty excited that we are shipping this improvement to Assignment filters. You can now filter Windows policy and app assignments on AAD Join Type! #MSIntune #MEM learn.microsoft.com/en-us/mem/intu

14

81

212

Jef Kazimer Retweeted

Replying to

The recommendation is to make sure policy covers all platforms, when it needs to be comprehensive. Targeting policy to only specific platforms can be useful when running pilots or to help with compliance, i.e. helping good users remember to enroll their mobile device.

2

1

4

Jef Kazimer Retweeted

How safe is your password? Here's a handy graphic.

45

344

1,132

Jef Kazimer Retweeted

🔑 FIDO2, New Hires & Lost Keys Part 3/3 in

's Passwordless AuthN Series ➡️ How they handle the "chicken and egg" new FIDO2 user problem (Azure TAP codes) and when users lose keys

blog.palantir.com

New Hires, Lost Keys & Lessons Learned (Passwordless Authentication Series, #3)

Lessons learned implementing FIDO2 authentication, from registering new hires to managing lost keys.

13

52

Jef Kazimer Retweeted

Mark Morowczynski (@markmorow@infosec.exchange)

Hey folks,

,

and I are back next week with

discussing what type of things he’s seeing out there and things he wishes people would do. Learn from others mistakes!

5

36

99

These AI remakes of animated TV shows like #TheSimpsons need to be made into a series.

The Simpsons as an 80's Sitcom

Hey guys, I hope you enjoy!Songs:Full House Season Eight Extended Theme Song: https://www.youtube.com/watch?v=d-OrHsG-03I&t=4sSimpson's End Credit Theme: htt...

1

2

Jef Kazimer Retweeted

How are you guys delivering credentials to your new hire employees? Are you using #AzureAD #Lifecycle workflow? Verified credentials? Sending it to the manager so they can pass that info? Emailing the creds to the new hire’s personal mailbox?

5

1

14

I totally missed this post about MS Graph SDK Powershell V2 public preview! #powershell #azuread #identity #msgraph

devblogs.microsoft.com

Microsoft Graph PowerShell v2 is now in public preview, half the size and speeds up automation

Try the new preview version of the Microsoft Graph PowerShell SDK v2, with new features and improvements to automate your work.

3

6

19

Already a few hundred attendees have signed up for the Passwordless Live Q&A happening tomorrow! Have questions? Have you signed up for it yet? #passwordless #security #MFA #entra #azuread #office365 #identity #securitykeys #FIDO2 #passwords linkedin.com/events/whyyous

Passwordless Workshop

read image description

ALT

3

6

Simplify your Org: - #AzureAD IS the Identity Provider for Office 365 - #AzureAD can be the IDP for all your other apps - You CAN federate #AzureAD with another supported IDP (ADFS,Okta,PingFederate,etc) but why 2 IDPs? - Migrate OTHER apps to #azuread for single IDP to support

5

19

88

Jef Kazimer Retweeted

Creating a #ConditionalAccess policy can be overwhelming. Our new video series aims to provide guidance and support by showcasing different policy designs and providing examples of practical deployments to meet various organizational requirements.

Create a Conditional Access Policy Design: The Baseline

Creating a set of Conditional Access policies on your own without ever seeing how other orgs do it can be hard. In this series, we will be showcasing differ...

1

10

30