We have configured SAML for Global Protect requiring sign in frequency every time and MFA.
Some users periodically experience that they can just connect without any MFA. I can also confirm within the logs it is well past the threshold of 5 minutes. Devices are Entra joined. 25H2 latest updates. Authentication happens via Default Browser (Edge) not embedded Browser. Cookie Lifetime also only 2 hours.
Welche Orte oder auch Aktivitäten würdet ihr vorschlagen in Münster für das erste Date mit einer Freundin?
I know probably the recommended way is to not do that but here we are.
I am talking about the app configuration not Tunnel or Entra Access.
I know files can be used but users would need to manually type in the address and logindata. Is there a better way?
I have the issue after the restart of the iOS device the VPN does not auto connect. No matter what settings it seems. In the documentation it says that when using SSO there are some issues regarding on demand von.
For iOS devices I have configured split tunneling and assigned the vpn profile. Per App vpn is disabled. On demand rules are activated connect vpn for all domains no dns probe. SSO is also configured.
App protection policy is assigned for work devices everything is allowed no restrictions all apps. No exemptions
Am I missing something? Has some configured this maybe this is the wrong approach and I should use per App vpn?
Or is it the default behaviour that one needs to manually activate the VPN tunnel in the defender app?
In a sw999 yao and huo² team which light cone is best (except sparxies main LC)? Most likely the herta LC one right?
Company needs to be carved out of the tenant any recommended service provider for that service? Includes M365, Azure and Dynamics Stack.
Company needs to be carved out of the tenant any recommended service provider for that service? Includes M365, Azure and Dynamics Stack.
I have configured Yubikey as a MFA method however now it always asks for the yubi which is expected as it is strongest MFA method. However I am not able to choose other authentication methods? Only Passkey or use password.
Problem is in title permissions and so on is not the problem. Anyone else not seeing the blade?
Any recommendations regarding a local Password Safe Server? Does not need to be Open source but should have an App for mobile solutions. Preferably something not extremely complex.
I would like to separate Helpdesk Accounts from their normal user accounts when initiating remote sessions. Do I understand that correctly I would need to license the separate accounts?
Anyone seeing the same in their tenant?
Is there a way to setup an ABM test tenant in order to connect it to intune for learning purposes?
You would need an actual company to set it up it seems no way around it?
When configuring the teamsite library sync it ran into the problem that the synced site never automatically shows. Only when adding manually a synced site via SharePoint for example only then it shows up. I have the policy assigned to devices. The sync windows I have also cut down to 1 hour. Am I missing something?
When you make apps available through the company portal only how exactly does updating of those apps work? Does this mean the user needs to manually update it through the company portal?
An ASR rule triggered for impersonated tools. I need to configure an exclusion however it seems in the ASR settings the option is missing?
Has anyone configured their authentication with Whfb? It often fails in the compliance check of the device. Has anyone experience on how to configure this correctly?
Is it worth it to get Cyrene at E0S0 with Phainon E1S1 when having Sunday E2S1?
When using Whfb which is by design already a phishing resistant MFA Method is there a way to force another MFA Method? For example Microsoft Authenticator Passkey or anything else after authenticating via PIN or biometrics?
When using Whfb which is by design already a phishing resistant MFA Method is there a way to force another MFA Method? For example Microsoft Authenticator Passkey or anything else after authenticating via PIN or biometrics?