February 26, 2024
Flow-Hive-Logo.png from Wikimedia This flow is usually called “device code flow”, but the documentation calls it “device authorization grant flow”. The docs. refer to these instructions with […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft Learn
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- .NET ASP.NET
- .NET ASP.NET Core
- .NET Core
- .NET Orleans
- #azcli
- #Kubernetes #open Source #Observability #monitoring
- 50-years
- Access Control
- ACR
- adaptive cloud
- Adversary-in-the-middle (AiTM)
- adx
- afraid
- AI
- ai assistant
- Airtouch5
- AKS
- AKS Hybrid
- alerts
- Alexa
- alm
- AMA
- Amazon
- Amazon AWS
- Amazon Cloud
- Amazon Web Services
- amd64
- analytics
- Analytics Rules
- Android
- ANF
- antivirus
- API Management
- apim
- App Configuration
- App Services
- apple
- applesilicon
- ApplicaionGateway
- Application Gateway
- Application Proxy
- Applied Skills
- Arc
- Arc-enabled SCVMM
- architecture
- Artifact Streaming
- ASP.NET Core
- ASP.NET Web API
- Assessments
- Atlassian
- authentication
- authorization
- automation
- AVD
- AVD Insights
- avnm
- aws
- AWS Calculator
- AWS Cloud
- AWS Cost Management
- AWS Lambda
- AWS Pricing
- awscli
- az-140
- AZ-900
- AzAPI
- Azure
- Azure Active Directory
- Azure AD
- Azure AI
- Azure ai-services
- Azure API Management
- Azure App Configuration
- Azure App Service
- Azure Application Gateway
- Azure Arc Enabled SQL Server
- Azure Arc Server
- Azure Arc Setup
- Azure Arc-enabled Server
- Azure Artifacts
- Azure Automation
- Azure azure-openai
- Azure Backup
- Azure Bicep
- Azure Blob Storage
- Azure Boards
- Azure Cloud
- Azure Cloud Services
- Azure Container Registry
- Azure Cosmos DB
- Azure Cost Management
- Azure Data Explorer
- Azure Data Factory (ADF)
- azure data region
- Azure Database for PostgreSQL; Azure Backup
- Azure DDoS
- Azure DevOps
- Azure Digital Twins
- Azure disk
- Azure Disk Storage
- Azure DNS
- Azure Event Hub
- Azure Event Hubs
- Azure File Share
- Azure File Shares
- Azure Files
- Azure Firewall
- Azure Free
- Azure Functions
- Azure Governance
- Azure HDInsight
- Azure Health Data Services; FHIR service; DICOM service
- Azure IoT
- Azure IoT Hub
- Azure Kubernetes Service
- Azure language-service
- Azure Load Balancer
- Azure Log Analytics
- Azure Logic Apps
- Azure Machine Learning
- Azure Machine Learning designer
- azure management
- Azure Metrics
- Azure Microsoft Sentinel
- Azure Migrate
- Azure Monitor
- Azure Monitor; Log Analytics; Azure Monitor Logs; Application Insights
- Azure Monitoring
- Azure NAT
- Azure NetApp Files
- Azure Network
- Azure Network Engineer
- Azure Network Security
- Azure Network Watcher
- Azure Networking
- azure openai
- azure openai service
- Azure Pipelines
- Azure Policies
- Azure Policy
- azure policy bicep
- Azure Portal
- Azure Private Link
- Azure Quantum
- azure rbac
- azure regions
- Azure Repos
- Azure Resource Graph
- Azure Resource Manager
- Azure Role-based access control
- azure route server
- azure routing
- Azure Security
- Azure Sentinel
- Azure Service Endpoint
- Azure SignalR Service
- Azure Spatial Anchors
- Azure Spring Apps
- Azure SQL DB
- Azure Stack
- Azure Stack HCI
- Azure Stack HCI 23H2
- Azure Standard
- Azure Storage
- Azure Storage Accounts
- Azure Stream Analytics
- Azure Test Plans
- Azure Traffic Manager
- Azure Translator Speech
- Azure Translator Text
- Azure Virtual Desktop
- Azure Virtual Machines
- Azure Virtual Network
- azure virtual network manager
- Azure Virtual WAN
- azure vm policy
- azure vm sizing
- azure vm sku
- Azure VPN Gateway
- Azure vWAN
- Azure WAF
- azure-ad-b2c
- azure-arc
- azure-b2c
- AzureAD
- azuredns
- AzurePortal
- AzureResourceManager
- AzureSpringApps
- AzureThrottling
- b2b
- b2c
- backup
- Backup Vault
- bare metal
- Basic R4
- basicr4
- Batch
- bearer-token
- beginners
- best practices
- bgp
- Bicep
- Big Data
- Biometrics
- BIOS
- Blizzard
- blob
- Block Country
- Block Device
- blog
- Book
- Book Review
- boto3
- Business Intelligence
- C#
- CAF
- Calico
- Call
- Capacity Planning
- captcha
- carbon emissions
- career-development
- Certificate
- certificates
- Certification
- Certifications
- ch340
- Charbel Nemnom MCT
- ci
- ciam
- cilium
- client side
- client-credentials
- client-credentials-flow
- climate change
- clipboard
- clipboard disable
- Cloud
- cloud adoption
- Cloud Adoption Framework
- Cloud Foundation
- Cloud Governance
- Cloud Kerberos Trust
- Cloud Logging
- Cloud Management
- Cloud Monitoring
- Cloud Native
- cloud networking
- Cloud Operations
- cloud security
- Cloud Storage
- cloud-computing
- CloudFamily
- Cluster
- Cmd
- codellama2
- Command Line
- community
- Compliance
- Compliance Management
- Conditional Access
- Config
- Configuration
- Confluence
- connection monitor
- Container insights
- containers
- Continue
- continuous access evaluation
- Copa
- copilot
- copilot for azure
- Copilot for Security
- copy
- copy restrictions
- Cost Management
- could
- Country
- credential theft
- credentials
- Cron
- cryptocurrency mining
- csharp
- CTI
- custom roles
- custom-policies
- customer
- Cyber
- Cyber Attacks
- Cyber Compliance
- Cyber Security
- Cyber Security Analytics
- Cyber Threat Intelligence
- Cyber Threats
- Cybersecurity
- CyberSecurity Analytics
- CycleCloud
- dac
- Dall-e
- data
- Data Analytics
- Data Box
- Data Box Disk
- data copy
- data governance
- data loss prevention
- data migration
- data plane
- Data Privacy
- Data Protection
- data-explorer
- database
- Databases
- Debian
- Decentralized Identity
- Deep Technical
- Defender
- deny
- deployment
- developers
- Device ID
- device-code
- devops
- DevOps Pipelines
- devops-pipeline
- dhcp
- diagnostic
- diagnostic data
- diagnostics
- direction
- DLP
- dns
- DocumentDB
- dotnet
- DPM
- dynamic content
- Dynamics 365
- Dynamics 365 Sales
- DynamoDB
- Edge
- Edge Computing
- EF Core
- elections
- Elevation of privilege
- Energy Meter
- Enterprise Scale
- entra
- Entra Connect Sync
- Entra Domain Services
- Entra ID
- Entra Private Access
- entra-external-id
- entra-verified-id
- entraid
- ESP32
- event hub
- Event Hubs
- Events
- exception
- exclustions
- Exec posts
- exploring
- ExpressRoute
- external
- external-id
- Extortion
- FaaS
- fabric
- Facial Scan
- Feature
- Features
- federation
- FIDO 2
- finops
- FinOps AzurePortal CostManagement
- Firewall
- Forest Blizzard (STRONTIUM)
- Forrester Waves
- Framework
- free tutorial
- FreeDNS
- FSH
- FSLogix
- FSLogix file lock
- FSLogix Performance
- Fujitsu
- Functions as a Service
- Gartner
- Gartner Magic Quadrant
- gdpr
- Gemma
- Generative AI
- Git
- Git for everyone
- GitHub
- GitHub Action
- GitHub Actions
- GitHub Actions Update Pull Request BOdy
- github desktop
- Google Cloud
- Google Cloud Logging
- Google Cloud Logging Infrastructure
- Google Cloud Platform
- Google Cloud Storage
- Google GCP
- governance
- Government
- GPO
- gpu
- Graph PowerShell
- Group Policy
- GroupPolicy
- groups
- GRS
- guest-account
- guest-login
- guest-user
- GZRS
- hardware encrypted disk
- Hardware Token
- HashiCorp
- HashiCorp Ambassador
- HDInsight
- Health
- heatsink
- Helm
- HoloLens
- Home Assistant
- Home lab
- homeassistant
- Host Pool
- HowTo
- human-operated ransomware
- HVAC
- Hybrid
- Hybrid Azure AD Join
- Hybrid Cloud
- Hybrid Cloud Management
- hybrid connectivity
- Hybrid Entra ID Join
- Hybrid Infrastructure
- Hybrid Join
- Hybrid Work
- Hyper-V
- IaaS
- IaC
- IAM
- identity
- Identity and access management
- identityserver4
- image
- Industry Solutions
- Industry Solutions Microsoft Cloud for Financial Services
- Industry Solutions Microsoft Cloud for Healthcare
- Infra structure as code
- Inner Range
- insights
- install
- Instructor
- internal
- Intune
- Intune Admin Templates
- intune configuration-manager
- Inverter
- Investor Relations
- IoT
- IP Location
- ip sla
- ipv6
- ISO
- java
- javascript
- Job
- journey
- json
- jwt
- jwt-token
- Key Trust
- Keyspaces
- KQL
- Kube-linter
- Kubelinter GitHub Actions
- kubernetes
- Kubernetes Best Practices
- Kubernetes Configuration Validation
- Kubernetes Helm
- Kusto
- Lab
- lambda
- Landing Zones
- LAPS
- large file
- Learn
- learning
- Learning Microsoft Azure
- Lenovo
- Libreoffice
- linking
- Linux App Service
- Linux on Azure
- LLM
- location
- Log Analytics
- Log Analytics Workspace
- Log Analytics; azure monitor; logs
- logging
- Logic Apps
- logs
- LRS
- m3
- Machine Learning and AI
- machinelearning
- Magic Quadrant
- Managed disk
- Managed Disks
- managed services
- Management
- management plane
- MCT
- message queue
- mfa
- microhdmi
- Microsoft
- Microsoft 365
- Microsoft 365 Apps Admin Center
- Microsoft 365 m365-apps
- Microsoft 365 Security Center
- microsoft ai
- Microsoft Applied Skills
- Microsoft Azure
- Microsoft Certification
- microsoft certifications
- Microsoft Certified
- Microsoft Certified Trainer
- Microsoft Cloud for Retail
- microsoft conference
- microsoft copilot
- Microsoft Copilot for Security
- Microsoft Credentials
- Microsoft Defender
- Microsoft Defender for Cloud
- Microsoft Defender XDR
- Microsoft Dev Box; Features; Services
- Microsoft Earnings Results
- Microsoft Endpoint Manager
- Microsoft Entra
- Microsoft Entra ID
- Microsoft Entra Internet Access
- Microsoft Entra Private Access
- microsoft exams
- Microsoft Fabric
- Microsoft Graph
- Microsoft Graph PowerShell
- Microsoft Ignite
- Microsoft Ignite 2023
- Microsoft Intune
- Microsoft Learn
- Microsoft Learning
- Microsoft Management Agent
- microsoft mvp
- Microsoft PC Manager
- Microsoft Power Platform
- Microsoft Power Platform AI Builder
- Microsoft Power Platform dataverse
- Microsoft Power Platform Power Apps
- Microsoft Power Platform Power Automate
- Microsoft Power Platform Power BI
- Microsoft Power Platform power-pages
- Microsoft Security
- Microsoft Security Copilot
- Microsoft Sentinel
- Microsoft Threat Intelligence
- Microsoft Visual Studio
- microsoft-defender defender-endpoint
- microsoft-defender defender-xdr
- microsoft-defender Microsoft Defender for Cloud Apps
- microsoft-defender Microsoft Defender for Identity
- Midnight Blizzard (NOBELIUM)
- Migration
- Mint Sandstorm (PHOSPHORUS)
- mirosoft azure
- Misc
- mistral
- MITRE ATT&CK
- Mixed Reality Toolkit
- mlstudio
- MMA
- mobile-app-development
- MongoDB
- MongoDB Atlas
- MongoDB Atlas Database
- Monitoring
- MQTT
- ms-copilot
- msal
- multi-factor-authentication
- multicloud
- mvp
- mvp award
- mvp summit
- Naming
- network
- network management
- network manager
- network monitoring
- Network Policies
- Network security
- network security group
- network security groups
- network trace analysis
- Network Watcher
- networking
- new
- New Job
- NIST
- Non-governmental organizations (NGOs)
- NoSQL
- NoSQL Database
- NoSQL Databases
- Notation
- NRF 2024
- NSG
- observability
- oidc
- Ollama
- OMS
- onboarding
- open source
- openai
- OpenTofu
- Operations Manager
- Opinion
- Oracle Cloud Infrastructure
- Orchestrator
- OS install
- otp-verification
- PaaS
- password-reset
- passwordgorilla
- paste
- PC Manager
- Performance
- Pester
- phone-number
- PIN
- Policies
- policy
- Polyaire
- postgresql
- postman
- power bi
- powershell
- premium
- Press Releases
- Privacy
- Privacy and Data Protection
- private
- Private Endpoint
- private endpoints
- private IP address
- private link
- private networking
- Product Review
- Productivity
- prometheus
- prometric
- psu
- Public IP Address
- Pull request comment
- python
- quick-start-guide
- r53
- ransomware
- ransomware-as-a-service
- Raspberry Pi
- raspberrypi
- Ratify
- RBAC
- rbac series
- rds
- Recent News
- Registry Editor
- Regulatory Compliance
- Remote code execution
- remote desktop
- Remote Desktop Services
- report-only
- Reservations
- Reserved Instances
- reset
- responsible-ai
- Retail
- Retirements
- Review
- role based access control
- roles
- route server
- route table
- Route53
- routeserver
- routing
- RS232
- Rs485
- Rufus
- Sandstorm
- sarif
- SCDPM
- SCOM
- Scripting
- SCVMM
- sd-wan
- sdk
- sdwan
- Search Job
- security
- security admin rules
- Security Compliance
- Security Copilot
- Security strategies
- self-service
- self-sovereign-identity
- Sentinel
- Server 2019
- Server 2022
- serverless
- Serverless computing
- Service
- Service Endpoint
- service endpoints
- Service Manager
- Services
- Sessions
- shortcuts
- SIEM
- sign-up
- sign-up-page
- Sleet
- sma
- SNZB-04
- SOAR
- Sonoff
- speaking
- spotify
- Spring
- sql
- SQL Server
- SSD
- SSD V2
- sspr
- SSTI
- Star Blizzard (SEABORGIUM)
- starcoder2
- State-sponsored threat actor
- static
- static content
- STIX
- storage
- Storage Account
- Storm
- Stream Analytic
- Study Guides
- switch
- synthetic traffic
- Sysadmin
- System Center
- System Center 2022
- System Center Data Protection Manager
- System Center Virtual Machine Manager
- Table Storage
- Tagging
- Tags
- Tasmota
- TAXII
- Technical
- telegram
- teleport
- Tempest
- Terraform
- Terraform Cloud
- text
- Thomas Maurer
- Threat Intelligence
- TI
- Token theft
- topping
- TPM
- Trainer
- Training
- Trivy
- troubleshooting
- Trusted Launch
- Trusted Platform Module
- tutorial
- Typhoon
- UAR
- Ubuntu
- ubuntu2310
- udr
- UEBA
- Uncategorized
- Update Rollup
- Update Rollup 2
- updated
- Upgrade
- UR2
- USB Boot
- USBTTL
- User Access Review
- User and Entity Behavior Analytics
- user-defined route
- user-flow
- V2
- verifiable-credentials
- Verified ID
- verified-credential
- verified-identity
- Veritas
- Video
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- Virtual Network Gateway
- virtual switch
- Virtualization
- Visual Studio
- Visual Studio Code
- Visual Studio IDE
- visualstudiocode
- vlc
- vm
- VM Applications
- VMM
- VMware
- vnc
- VNet
- vnet injection
- vnet integration
- vpc
- vpn
- vscode
- vue
- Vulnerabilities
- vulnerability
- vxlan
- WAF
- Web Content Filtering
- web site
- website
- Well-Architected
- Well-Architected Framework
- what-if
- WHfB
- Windows
- Windows 10
- Windows 365
- Windows Authentication
- Windows Client
- Windows Console
- windows containers
- Windows Hello
- Windows Hello for Business
- Windows Mixed Reality
- Windows PIN
- Windows Server
- Windows Server Summit
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Virtual Desktop
- wizardcoder
- WVD
- youtube
- Yubi Key
- ZHA
- Zigbee
- ZRS
- All
- Aidan Finn
- Alan Kinane
- Andy Roberts
- Az Advertizer
- azurefeeds
- Charbel Nemnom
- Darren Robinson
- David O'Brien
- Freek Berson
- George Ollis
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- Joe Carlyle
- John Kilmister
- Jose Moreno
- Luke Murray
- Matt Felton
- mslearn
- Olivier Miossec
- Pixel Roberts
- Rod Trent
- Rory Braybrook
- Sam Cogan
- Sarah Lean
- Shane Baldacchino
- Simon Waight
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Wesley Haakman
- Will Velida
February 21, 2024
Published by Rory Braybrook on February 21, 2024
Categories
In Azure AD B2C, you have different user flows, so if you don’t want the user to sign up, you simply create a sign-in-only user flow. In […]
February 17, 2024
Published by Rory Braybrook on February 17, 2024
Categories
Azure AD B2C supports client credentials but is not straightforward to implement. If you want to get B2C to generate the credential itself, look here. CIAM implements […]
February 13, 2024
Published by Rory Braybrook on February 13, 2024
Categories
3-D link clay dynamic icon from Wikimedia In B2C, you can use custom policies to link two identities together, e.g. a user who authenticates with Google […]
February 10, 2024
Published by Rory Braybrook on February 10, 2024
Categories
Head-spinning icon from Wikimedia Entra ID B2B has two parts to it: External ID for customers (CIAM) B2B Entra ID B2B The confusion exists around the self-service sign-up user flow. […]
February 8, 2024
Published by Rory Braybrook on February 8, 2024
Categories
There seems to be some confusion about CIAM. It is not a renaming of B2C but rather a new next-generation product. I’ve noted the differences, but I […]
January 29, 2024
Published by Rory Braybrook on January 29, 2024
Categories
When I first tried this, I got an error that I documented in a post. The answer was to use the Microsoft.Identity.Web samples rather than the MSAL ones. […]
January 13, 2024
Published by Rory Braybrook on January 13, 2024
Categories
Logo_CIAM.jpg from Wikimedia The full error is : AADSTS500208: The domain is not a valid login domain for the account This happens when you create an app. registration […]