March 13, 2025
A “sub” :-) — Bellona Foundation via Wikimedia Commons The custom setup of the client credentials flow is described here. The custom policy is here. When you get the JWT back: […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Blog
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- Active Directory
- Activity Log
- Adversary-in-the-middle (AiTM)
- Agentic AI
- agic
- AI
- AI + Machine Learning
- ai foundry
- AIOps
- AKS
- AMA
- AML
- analytics
- Analytics and Big Data
- Annual Channel
- API Management
- API manager
- apim
- apiops
- APIs
- App Configuration
- App Control
- app service
- Application Gateway
- application gateway for containers
- Application Insights
- Arc Jumpstart
- arm
- Article
- Artificial Intelligence
- ASP.NET Core
- Audio Notes
- authentication
- authorization
- Auto Mode
- automation
- Automation Account
- Availability Zones
- AVD
- AVD Optimization
- AVD Setup
- AVD Storage Optimization
- AVM
- avnm
- aws
- AZ Files
- AZ-900
- Azure
- Azure 2025 Update
- Azure Access Control
- Azure Action Groups
- Azure Active Directory
- Azure Activity Logs
- Azure AD
- Azure Adaptive Cloud
- Azure Admin Guide
- Azure Administration
- Azure Admins
- azure adoption
- Azure AI
- Azure AI Language
- azure ai studio
- Azure ai-services
- Azure Alerts
- azure application delivery
- Azure Application Gateway
- azure application gateway for containers
- Azure Archive Storage
- Azure Automation
- Azure Backup
- Azure Bastion
- Azure Best Practices
- Azure Bicep
- Azure Billing Models
- Azure Blob
- Azure Blob Storage
- Azure Blob vs File Storage
- Azure Blob vs File vs Disk
- Azure Built-In Security
- Azure Cache for Redis
- Azure Chaos Studio
- Azure Cloud
- Azure Cloud Architect
- Azure Cloud Computing
- Azure Cloud Management
- Azure Cloud Security
- Azure Cloud Storage
- Azure Cloud Tutorial
- Azure Compliance
- Azure Compute Fleet
- Azure Conditional Access
- Azure confidential ledger
- Azure Configuration Tutorial
- Azure Container Apps
- Azure Container Instances
- Azure Container Storage
- Azure Cosmos DB
- Azure Data Box
- Azure Data Explorer
- Azure Data Factory
- Azure Data Lake Storage
- Azure Data Management
- Azure Data Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Database Migration service
- Azure Databricks
- Azure Demo
- Azure Deployment Environments
- Azure DevOps
- Azure DevTest Labs
- Azure Disk Storage
- Azure DNS
- Azure Domain Services
- Azure Dynamic Alerts
- Azure Edition
- Azure Elastic SAN
- Azure Enterprise Applications
- Azure Entra ID
- azure essentials
- Azure ExpressRoute
- Azure File Share
- Azure File Share Best Practices
- Azure File Share Configuration
- Azure File Share Explained
- Azure File Share Metrics
- Azure File Share Optimization
- Azure File Share Performance
- Azure File Shares
- Azure File Storage
- Azure File Storage Comparison
- Azure File Storage Pricing
- Azure Files
- Azure Files Demo
- Azure Firewall
- Azure Firewall Manager
- azure firewall policy
- azure fleet
- Azure Front Door
- Azure Functions
- Azure Functions Flex Comsumption
- Azure Global
- Azure Governance
- Azure HDInsight on Azure Kubernetes Service (AKS)
- Azure Health Data Services
- azure hybrid
- Azure Hybrid Identity
- Azure Image Builder
- Azure Infrastructure
- Azure Internet Access
- Azure IP Addressing
- Azure Key Vault
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Lab
- Azure Load Balancer
- Azure Load Testing
- Azure Local
- Azure Log Analytics
- Azure Logic App
- Azure Logic Apps
- Azure Machine Learning
- azure management
- Azure Marketplace
- Azure Metrics
- Azure Migrate
- Azure Monitor
- Azure Monitor Agent
- Azure Monitor Workbooks
- Azure NAT Gateway
- Azure NAT Gateway Tutorial
- Azure NetApp Files
- Azure Network Security
- Azure Networking
- Azure Networking Configuration
- azure networking tutorial
- Azure Open AI
- Azure Open Source
- azure openai
- azure openai service
- Azure Performance Monitoring
- Azure Performance Optimization
- Azure Policy
- Azure Portal
- Azure Portal Tutorial
- Azure PowerShell
- Azure Private Access
- Azure Private Applications
- Azure Private Endpoint
- Azure Private Link
- Azure Private Link Service
- Azure Private Networking
- Azure Private Subnets
- Azure Profile Management
- azure rbac
- Azure Red Hat OpenShift
- Azure Resource Graph
- Azure Resource Group
- Azure Resource Locks
- azure routing
- Azure Secure Connectivity
- Azure Security
- Azure Security Best Practices
- Azure Sentinel
- Azure Setup
- Azure SignalR Service
- Azure Site Recovery
- Azure Skill Sprint
- Azure Sphere
- Azure Spot Virtual Machines
- Azure Spring Apps
- Azure SQL
- Azure SQL Database
- Azure SQL DB
- Azure SQL Edge
- Azure SQL Managed Instance
- Azure Stack
- Azure Stack HCI
- Azure Static Alerts
- Azure Step-by-Step
- Azure Step-by-Step Guide
- Azure Storage
- Azure Storage Access Tiers
- Azure Storage Access Tiers Explained
- azure storage account
- Azure Storage Account Setup
- Azure Storage Actions
- Azure Storage Alerts
- Azure Storage Best Practices
- Azure Storage Cost Optimization
- Azure Storage Cost Savings
- Azure Storage Demo
- Azure Storage Explained
- Azure Storage for Beginners
- Azure Storage IOPS
- Azure Storage Monitoring
- Azure Storage Options
- Azure Storage Overview
- Azure Storage Performance
- Azure Storage Pricing
- Azure Storage Tips
- Azure Storage Tutorial
- Azure Storage Types
- Azure Stream Analytics
- azure subnet
- Azure Subnets
- Azure Subscription
- Azure Synapse Analytics
- azure tips and tricks
- azure traffic analytics
- Azure Traffic Forwarding
- azure training
- Azure Troubleshooting
- Azure Tutorial
- azure tutorial for beginners
- Azure Tutorials
- Azure Update Manager
- Azure Verified Modules
- Azure Virtual Desktop
- azure virtual machine
- Azure Virtual Machines
- Azure Virtual Network
- azure virtual network manager
- Azure Virtual Networks
- Azure VM
- Azure VM Internet Access
- Azure VM Security
- Azure VM Setup
- Azure VMware Solution
- Azure VNets
- Azure VPN Alternative
- Azure Well-Architected Framework
- azure-ad-b2c
- azure-arc
- azure-b2c
- AzureAIFoundry
- AzureAISearch
- azuredevops
- azureopenai
- AzureTutorial
- azureverifiedmodules
- Bastion Host
- Batch
- beginners
- best practices
- bgp
- Bicep
- Bing Search
- Blazor
- Blizzard
- blog
- Book Review
- Bot
- branch
- Branches
- Bugs
- Business
- Business Intelligence
- C#
- Canceled
- CCAK
- Certificate of Cloud Auditing Knowledge
- certificates
- Certification
- Certifications
- chatgpt
- client-credentials-flow
- Cloud
- Cloud Adoption Framework
- Cloud Architect
- Cloud Audit
- Cloud Cultures
- Cloud Foundation
- Cloud Governance
- Cloud Infrastructure
- Cloud Mechanix
- Cloud Native
- Cloud Network Security
- cloud networking
- cloud security
- Cloud Security Alliance
- Cloud Services
- Cloud Skills
- Cloud Storage
- Cloud Storage Tiers
- cloud-computing
- CloudFamily
- CloudSecurity
- Cmd
- cmk
- CNAPP
- code
- codegeneration
- Command Line
- community
- Compliance
- compute
- Conditional Access
- Conditional Access Policies
- Conference
- Configuration
- container networking
- containers
- copilot
- cordon
- Cost Management
- cost-optimization
- Course
- credential theft
- cryptojacking
- csharp
- custom error
- custom-policies
- Customer Managed Key
- Cyber Security
- Cybersecurity
- CyberSecurity Certifications
- D365
- D365 CE
- D365 F&O
- D365 Sales & CRM
- dashboards
- Data Protection
- Databases
- Dayforce
- Default Outbound Access
- delete
- Deleted
- dependabot
- deployment
- dev-containers
- Developer Life
- Developer Tools
- Development
- devops
- DevSecOps
- Diagnostic Settings
- dns
- Document Summarisation
- Domain Controller
- dotnet
- Dynamic Scope
- ECMA2
- Edge
- EF Core
- EKS
- Elastic Search
- Encryption
- Enterprise File Sharing
- entra
- Entra Configuration
- Entra Global Secure Access
- Entra ID
- Entra ID Free
- Entra ID licensing
- Entra Internet Access
- Entra Private Access
- Entra Private Access Tutorial
- Entra Reporting
- Entra Suite
- epac
- Event
- Event Grid
- Events
- Exam Prep
- Exec posts
- ExpressRoute
- expressroute local
- Extended Network for Azure
- external-id
- external-identity
- fail()
- Features
- federation
- fiddler
- file shares
- File Sharing Security
- FIM
- fine-tuing
- Fine-tuning
- finops
- Firewall
- Firewall Policy
- Flex Comsumption Deployment
- flow
- Forrester Waves
- foundry
- free
- FSLogix Best Practices
- FSLogix Configuration
- FSLogix Performance
- FSLogix Tips
- FSLogix Troubleshooting
- FSMO Roles
- Function App
- Function Calling
- Gartner Magic Quadrant
- gateway api
- gateway subnet
- gatewaysubnet
- genai
- General
- General Development
- Generative AI
- Git
- GitHub
- GitHub Actions
- github copilot
- GitHub Project
- githubcopilot
- Global Secure Access
- governance
- gpt4o
- Grafana
- grafana dashboards
- granfeldt
- Graph
- gwctl
- HashiCorp
- HashiCorp Ambassador
- Healthcare
- Helm
- Hot Cool Cold Archive Tiers
- How-to
- http route
- hub
- Hub & Spoke
- hub-and-spoke
- Hybird
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- Hybrid Identity
- IaaS
- IaC
- icmp
- identity
- Identity and access management
- Identity-Based Security
- In development
- In preview
- infrastructure
- Infrastructure As Code
- infrastructureascode
- ingress controller
- Integration
- Internet of Things
- Investor Relations
- IoT
- IP Addressing in Azure
- ipam
- IPv4
- ISACA
- IT Networking
- IT Pro
- IT Professionals
- IT Security
- IT Training
- IT Tutorials
- java
- jwt-token
- KDC Proxy
- Kerberos Authentication
- Key Vault
- kinde
- KQL
- kubernetes
- kubernetes fleet
- kubernetes gateway
- kubernetes gateway api
- kubernetes networking
- Kusto
- kusto query language
- Lab
- Lambda functions
- Landing Zones
- Launched
- learning
- LINUX
- Linux Server
- Linux Virtual Machines
- Linux VM
- Living off the land
- LLM
- Load Balancer
- load balancing
- load testing
- Lock Resources Azure
- Log Alerts
- Log Analytics
- Log Analytics Workspace
- Logic Apps
- Long-Term Servicing Channel
- macOS
- Managed Prometheus
- Management
- Management and Governance
- Management Groups
- masking
- Micosoft Ignite 2024
- micro-segmentation
- Microsoft
- Microsoft 365
- Microsoft 365 Security
- Microsoft Azure
- Microsoft Azure Tutorial
- Microsoft Cloud
- Microsoft Cloud Security
- Microsoft Cloud Storage
- Microsoft Connect
- Microsoft Copilot for Azure
- Microsoft Defender
- Microsoft Defender XDR
- Microsoft Dev Box
- Microsoft Earnings Results
- Microsoft Entra
- Microsoft Entra ID
- Microsoft Entra Suite
- Microsoft Fabric
- Microsoft Graph
- Microsoft identity management
- Microsoft Ignite
- Microsoft Ignite 2024
- Microsoft Learning
- Microsoft licensing
- Microsoft PIM
- Microsoft Security
- Microsoft Sentinel
- Microsoft SQL Server
- Microsoft Training
- Microsoft Visual Studio
- microsoft-support
- MicrosoftBuild
- Midnight Blizzard (NOBELIUM)
- Migration
- MIM
- Misc
- MITRE ATT&CK
- Mobile
- Monitoring
- msal
- msee
- MSEvents
- MSIgnite2024
- multi-cluster load balancing
- multi-cluster networking
- multi-region
- multicloud
- multiregion
- MVPBuzz
- NAT Gateway
- NAT in Azure
- network
- Network Address Translation
- Network security
- network security group
- Network Traffic Filtering
- network virtual appliance
- Network Watcher
- network-tracking
- networking
- Networking Basics
- new
- NFS
- NFS Azure
- NFSPermissions
- NSG
- nva
- NVIDIA
- nxdomain
- nxdomainredirect
- observability
- oidc
- Open AI
- open source
- openai
- OpenAI Assistant
- Operating System
- OperatingSystem
- Operational Excellence
- P1 vs P2
- PaaS
- PaaS networking
- Packer
- path prepending
- Performance Efficiency
- PIM
- pipelines
- Playbook
- Pluralsight
- postgresql
- Power Apps
- power automate
- Power Automate Flow
- power bi
- Power BI Embedded
- power-platform
- powershell
- presentations
- Press Releases
- Prevent Resource Deletion
- Pricing & Offerings
- Privacy
- private dns
- Private Endpoint
- Private Endpoint Configuration
- private link
- Private Link Service Tutorial
- private networking
- Private Subnets
- privatelink
- privatelinkrealitybites
- Privileged Identity Management
- Process Improvement
- Productivity
- Promote DC
- Prompt Engineering
- Prompty
- Prototyping
- Provisioned V1 vs V2
- Provisioned V2 Azure
- Public vs Private IP
- pullrequest
- python
- Quick Post
- ransomware
- Raspberry Pi
- RBAC
- Recent News
- recording
- Regions & Datacenters
- Reliability
- Remote code execution
- Resiliency
- resolution
- Resource Health
- Resource Locking
- responsible-ai
- Retirements
- reverse proxy
- route table
- router
- routeserver
- routing
- s2s vpn
- SAML
- SCDPM
- SCOM
- SCVMM
- SDK and Tools
- SdkAndTools
- SDKs
- Secure Azure Connections
- Secure File Sharing
- Secure Internet Access
- Secure Remote Access
- Secure SMB Access
- Secure Web Gateway
- security
- Security Baseline
- Security strategies
- Semantic Kernel
- Sentinel
- service endpoint policy
- Service Management
- Services
- setup
- Share Access Signature
- SIEM
- site-to-site
- Sleet
- SMB Configuration
- SMB over QUIC
- SMS
- SOAR
- Software-Defined Networking
- speaking
- Speech
- Speech to Text
- spoke
- SQL Interview
- SQL Server
- SQL Server on Azure Virtual Machines
- Star Blizzard (SEABORGIUM)
- State Management
- Static IP Azure
- storage
- Storage Access
- Storage Accounts
- Storage Metrics
- Storage Replicas
- storage setup
- Storm
- subnet
- Subnet Mask
- Subnetting
- Survey
- Sysadmin
- SysCtr
- Syslog
- system administrator
- System Center
- System Center 2025
- teams
- tech tip
- Tech Tutorial
- Technology
- TechTips
- Terraform
- Terraform Tests
- test
- testing
- Text Analytics
- Thomas Maurer
- Threat Detection
- TLS 1.3 Encryption
- Token theft
- totp
- trace
- traffic analytics
- traffic visibility
- Training
- Transaction Optimzed
- troubleshooting
- tutorial
- udr
- Uncategorized
- Update Manager
- updated
- user-defined route
- User-Defined Routing
- VDI
- VDI Solutions
- Video
- Virtual desktop infrastructure
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network appliance
- Virtual Network Gateway
- virtual network service endpoint
- Virtual Network Subnet
- Virtual WAN
- Virtualization
- Visual Studio
- Visual Studio Code
- VNet
- VNet Flow Logging
- vnet flow logs
- VNet Peering
- vpn
- VPN Alternative
- vpn site-to-site
- vwan
- walk through
- walkthrough
- Web
- web application firewall
- Web Content Filtering
- Web Filtering Policy
- Well-Architected Framework
- WellArchitectedFramework
- Windows
- Windows 11
- Windows 365
- Windows AD
- Windows Admin Center
- Windows Console
- Windows Firewall
- Windows Security
- Windows Server
- Windows Server 2022
- Windows Server 2025
- Windows Server Azure Edition
- Windows Server Comparison
- Windows Server Datacenter
- Windows Server Deployment
- Windows Server Features
- Windows Server Hotpatching
- Windows Server Licensing
- Windows Server Management
- Windows Server Service Channels
- Windows Server Standard
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Virtual Desktop
- Windows Virtual Machines
- Workbooks
- XDR
- yaml
- Year In Review
- Zero Trust
- Zero Trust Networking
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Andy Roberts
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Azure Tar
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Daniel Bradley
- Darren Robinson
- David O'Brien
- Dieter Gobeyn
- Freek Berson
- George Ollis
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Matt Felton
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rory Braybrook
- Roy Kim
- Sam Cogan
- Sarah Lean
- Scott Hanselman
- Simon Waight
- Stanislav Zhelyazkov
- Sucheta Gawade
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Wesley Haakman
- Will Velida
March 10, 2025
Published by Rory Braybrook on March 10, 2025
Categories
Kinde supports SAML but only as a SP. The Kinde SAML documentation is here. The B2C SAML IDP configuration is described here. The B2C custom policy needed for […]
March 10, 2025
Published by Rory Braybrook on March 10, 2025
Categories
Entra External ID can currently be used as a SAML SP but not as an IDP. The B2C SAML IDP configuration is described here. As usual, the […]
March 6, 2025
Published by Rory Braybrook on March 6, 2025
Categories
Microsoft Graph The usual way to call the Graph API is from the application, but what happens if you want to call the API directly from B2C? […]
March 4, 2025
Published by Rory Braybrook on March 4, 2025
Categories
Integrating both SMS and TOTP MFA in a single custom policy in Azure AD B2C and giving users the choice Christine Johnstone / Spoilt for choice from […]
January 26, 2025
Published by Rory Braybrook on January 26, 2025
Categories
F.uzan82, CC BY-SA 4.0, via Wikimedia Adding third-party OIDC connections to Entra External ID is now in public preview. The documentation is here. The B2C-specific documentation is here. As […]
November 12, 2024
Published by Rory Braybrook on November 12, 2024
Categories
Ervins Strauhmanis, CC BY 2.0, via Wikimedia Commons You sometimes need to clear a claim in the claims bag while using custom policies. This may be […]
October 2, 2024
Published by Rory Braybrook on October 2, 2024
Categories
Mmaric1978, CC BY-SA 4.0, via Wikimedia Commons Note that this post is around a PoC, so use it at your own risk! Overview The sample is here. Note […]