March 13, 2025
A “sub” :-) — Bellona Foundation via Wikimedia Commons The custom setup of the client credentials flow is described here. The custom policy is here. When you get the JWT back: […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Blog
- Azure Retirements
- Azure Updates
- Command Line
- Community
- Microsoft News
- Microsoft Security
- Tech Community
- All
- .NET
- Active Directory
- Adversary-in-the-middle (AiTM)
- Agentic AI
- agic
- AI
- AI + Machine Learning
- ai foundry
- AIOps
- AKS
- AMA
- AML
- analytics
- Analytics and Big Data
- Annual Channel
- Annual Shareholders Meeting
- AOAI
- API Management
- API manager
- apim
- apiops
- APIs
- App Configuration
- app service
- Application Gateway
- application gateway for containers
- Application Insights
- Arc Jumpstart
- Artificial Intelligence
- ASP.NET Core
- Audio Notes
- authentication
- authorization
- Auto Mode
- automation
- Automation Account
- Availability Zones
- AVD
- AVD Optimization
- AVD Setup
- AVD Storage Optimization
- AVM
- avnm
- aws
- AZ Files
- AZ-900
- Azure
- Azure 2025 Update
- Azure Access Control
- Azure Action Groups
- Azure Active Directory
- Azure AD
- Azure Adaptive Cloud
- Azure Admin Guide
- Azure Administration
- Azure Admins
- azure adoption
- Azure AI
- Azure AI Language
- Azure AI Speech
- azure ai studio
- Azure ai-services
- Azure Alerts
- azure application delivery
- Azure Application Gateway
- azure application gateway for containers
- Azure Archive Storage
- Azure Automanage
- Azure Automation
- Azure Backup
- Azure Bastion
- Azure Best Practices
- Azure Bicep
- Azure Billing Models
- Azure Blob
- Azure Blob Storage
- Azure Blob vs File Storage
- Azure Blob vs File vs Disk
- Azure Built-In Security
- Azure Cache for Redis
- Azure Chaos Studio
- Azure Cloud
- Azure Cloud Architect
- Azure Cloud Computing
- Azure Cloud Management
- Azure Cloud Security
- Azure Cloud Storage
- Azure Cloud Tutorial
- Azure Compute Fleet
- Azure Conditional Access
- Azure confidential ledger
- Azure Configuration Tutorial
- Azure Container Apps
- Azure Container Instances
- Azure Container Registry
- Azure Container Storage
- Azure Cosmos DB
- Azure Data Box
- Azure Data Explorer
- Azure Data Factory
- Azure Data Lake Storage
- Azure Data Management
- Azure Data Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Database Migration service
- Azure Databricks
- Azure Demo
- Azure Deployment Environments
- Azure DevOps
- Azure DevTest Labs
- Azure Disk Storage
- Azure DNS
- Azure Dynamic Alerts
- Azure Edition
- Azure Elastic SAN
- Azure Enterprise Applications
- Azure Entra ID
- azure essentials
- Azure ExpressRoute
- Azure File Share
- Azure File Share Best Practices
- Azure File Share Configuration
- Azure File Share Explained
- Azure File Share Metrics
- Azure File Share Optimization
- Azure File Share Performance
- Azure File Shares
- Azure File Storage
- Azure File Storage Comparison
- Azure File Storage Pricing
- Azure Files
- Azure Files Demo
- Azure Firewall
- Azure Firewall Manager
- azure firewall policy
- Azure Front Door
- Azure Functions
- Azure Functions Flex Comsumption
- Azure Global
- Azure Governance
- Azure HDInsight on Azure Kubernetes Service (AKS)
- Azure Health Data Services
- Azure Hybrid Identity
- Azure Image Builder
- Azure Internet Access
- Azure IP Addressing
- Azure Key Vault
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Load Balancer
- Azure Load Testing
- Azure Local
- Azure Log Analytics
- Azure Logic App
- Azure Logic Apps
- Azure Machine Learning
- azure management
- Azure Maps
- Azure Marketplace
- Azure Metrics
- Azure Migrate
- Azure Monitor
- Azure Monitor Agent
- Azure NAT Gateway
- Azure NAT Gateway Tutorial
- Azure NetApp Files
- Azure Network Security
- Azure Networking
- Azure Networking Configuration
- azure networking tutorial
- Azure Open AI
- Azure Open Source
- azure openai
- azure openai service
- Azure Performance Monitoring
- Azure Performance Optimization
- Azure Policy
- Azure Portal
- Azure Portal Tutorial
- Azure PowerShell
- Azure Private Access
- Azure Private Applications
- Azure Private Endpoint
- Azure Private Link
- Azure Private Link Service
- Azure Private Networking
- Azure Private Subnets
- Azure Profile Management
- azure rbac
- Azure Red Hat OpenShift
- Azure Resource Graph
- Azure Resource Group
- Azure Resource Locks
- azure routing
- Azure Secure Connectivity
- Azure Security
- Azure Security Best Practices
- Azure Sentinel
- Azure SignalR Service
- Azure Site Recovery
- Azure Skill Sprint
- Azure Sphere
- Azure Spot Virtual Machines
- Azure Spring Apps
- Azure SQL
- Azure SQL Database
- Azure SQL DB
- Azure SQL Edge
- Azure SQL Managed Instance
- Azure Stack
- Azure Stack HCI
- Azure Static Alerts
- Azure Step-by-Step
- Azure Step-by-Step Guide
- Azure Storage
- Azure Storage Access Tiers
- Azure Storage Access Tiers Explained
- azure storage account
- Azure Storage Account Setup
- Azure Storage Actions
- Azure Storage Alerts
- Azure Storage Best Practices
- Azure Storage Cost Optimization
- Azure Storage Cost Savings
- Azure Storage Demo
- Azure Storage Explained
- Azure Storage for Beginners
- Azure Storage IOPS
- Azure Storage Monitoring
- Azure Storage Options
- Azure Storage Overview
- Azure Storage Performance
- Azure Storage Pricing
- Azure Storage Tips
- Azure Storage Tutorial
- Azure Storage Types
- Azure Stream Analytics
- azure subnet
- Azure Subnets
- Azure Synapse Analytics
- azure tips and tricks
- Azure Traffic Forwarding
- azure training
- Azure Troubleshooting
- Azure Tutorial
- azure tutorial for beginners
- Azure Tutorials
- Azure Verified Modules
- Azure Virtual Desktop
- azure virtual machine
- Azure Virtual Machines
- Azure Virtual Network
- azure virtual network manager
- Azure Virtual Networks
- Azure Virtual WAN
- Azure VM
- Azure VM Internet Access
- Azure VM Security
- Azure VMware Solution
- Azure VNets
- Azure VPN Alternative
- Azure Well-Architected Framework
- azure-ad-b2c
- azure-arc
- azure-b2c
- azuredevops
- azureopenai
- AzureTutorial
- Bastion Host
- Batch
- beginners
- bgp
- Bicep
- Bing Search
- Blazor
- Blizzard
- blog
- Book Review
- Bot
- branch
- Branches
- Bugs
- Business
- Business Intelligence
- C#
- CCAK
- Certificate of Cloud Auditing Knowledge
- certificates
- Certification
- Certifications
- client-credentials-flow
- Cloud
- Cloud Adoption Framework
- Cloud Architect
- Cloud Audit
- Cloud Cultures
- Cloud Foundation
- Cloud Governance
- Cloud Infrastructure
- Cloud Mechanix
- Cloud Native
- Cloud Network Security
- cloud networking
- cloud security
- Cloud Security Alliance
- Cloud Services
- Cloud Skills
- Cloud Storage
- Cloud Storage Tiers
- cloud-computing
- CloudFamily
- CloudSecurity
- Cmd
- CNAPP
- codegeneration
- Command Line
- community
- Compliance
- compute
- Conditional Access
- Conditional Access Policies
- Conference
- Configuration
- container networking
- containers
- Content Delivery Network
- copilot
- cordon
- Cost Management
- cost-optimization
- Course
- credential theft
- cryptojacking
- csharp
- custom-policies
- Cyber Security
- Cybersecurity
- CyberSecurity Certifications
- Data Protection
- Databases
- Dayforce
- Default Outbound Access
- Defender EASM
- delete
- dependabot
- Developer Life
- Developer Tools
- Development
- devops
- DevSecOps
- dns
- Document Summarisation
- dotnet
- EASM
- ECMA2
- Edge
- EF Core
- EKS
- Elastic Search
- Enterprise File Sharing
- Entity Behavior
- entra
- Entra Configuration
- Entra Global Secure Access
- Entra ID
- Entra ID Free
- Entra ID licensing
- Entra Internet Access
- Entra Private Access
- Entra Private Access Tutorial
- Entra Reporting
- Entra Suite
- Event
- Event Grid
- event viewer
- Events
- Exam Prep
- Exec posts
- ExpressRoute
- expressroute local
- Extended Network for Azure
- external-id
- external-identity
- Features
- federation
- fiddler
- FIDO2
- file shares
- File Sharing Security
- FIM
- finops
- Firewall
- Firewall Policy
- Flex Comsumption Deployment
- flow
- Forrester Waves
- foundry
- free
- FSLogix Best Practices
- FSLogix Configuration
- FSLogix Performance
- FSLogix Tips
- FSLogix Troubleshooting
- Function App
- Function Calling
- Gartner Magic Quadrant
- gateway api
- gateway subnet
- gatewaysubnet
- genai
- General
- General Development
- Generative AI
- Git
- GitHub
- GitHub Actions
- github copilot
- GitHub Project
- githubcopilot
- Global Secure Access
- governance
- gpt4o
- granfeldt
- Graph
- gwctl
- HashiCorp
- HashiCorp Ambassador
- Healthcare
- Helm
- Home Office
- Hot Cool Cold Archive Tiers
- How-to
- http route
- hub
- Hub & Spoke
- hub-and-spoke
- Hybird
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- IaaS
- IaC
- icmp
- identity
- Identity and access management
- Identity-Based Security
- In development
- In preview
- infrastructure
- Infrastructure As Code
- infrastructureascode
- ingress controller
- Integration
- Internet of Things
- Investor Relations
- IoT
- IP Addressing in Azure
- ipam
- IPv4
- ISACA
- IT Networking
- IT Professionals
- IT Security
- IT Training
- IT Tutorials
- java
- just in time compute
- jwt-token
- KDC Proxy
- Kerberos Authentication
- Key Vault
- kinde
- KQL
- KubeConfig
- kubernetes
- kubernetes gateway api
- kubernetes networking
- KubeTidy
- Kusto
- kusto query language
- Lab
- Landing Zones
- Launched
- learning
- LINUX
- Linux Server
- Linux Virtual Machines
- Linux VM
- Living off the land
- LLM
- Load Balancer
- load balancing
- load testing
- Lock Resources Azure
- Log Analytics
- Log Analytics Workspace
- Logic Apps
- Long-Term Servicing Channel
- macOS
- Managed Prometheus
- Management
- Management and Governance
- masking
- Media
- mfa
- Micosoft Ignite 2024
- micro-segmentation
- Microsoft
- Microsoft 365
- Microsoft 365 Security
- Microsoft Azure
- Microsoft Azure Tutorial
- Microsoft Certification
- microsoft certifications
- Microsoft Certified
- Microsoft Cloud
- Microsoft Cloud Security
- Microsoft Cloud Storage
- Microsoft Connect
- Microsoft Copilot for Azure
- Microsoft Defender
- Microsoft Defender EASM
- Microsoft Defender XDR
- Microsoft Dev Box
- Microsoft Earnings Results
- Microsoft Entra
- Microsoft Entra ID
- Microsoft Entra Suite
- Microsoft Fabric
- Microsoft Graph
- Microsoft identity management
- Microsoft Ignite
- Microsoft Ignite 2024
- Microsoft Learn
- Microsoft Learning
- Microsoft licensing
- Microsoft PIM
- Microsoft Playwright Testing
- Microsoft Purview
- Microsoft Security
- Microsoft Sentinel
- Microsoft Sentinel UEBA
- Microsoft SQL Server
- Microsoft Training
- Microsoft Visual Studio
- microsoft-support
- MicrosoftBuild
- Midnight Blizzard (NOBELIUM)
- Migration
- MIM
- Misc
- MITRE ATT&CK
- mixed reality
- Mobile
- Monitoring
- MS-102
- MS-102 Exam
- msal
- msee
- MSEvents
- MSIgnite2024
- multi-region
- multicloud
- multiregion
- MVPBuzz
- NAT Gateway
- NAT in Azure
- network
- Network Address Translation
- Network security
- network security group
- Network Traffic Filtering
- network virtual appliance
- Network Watcher
- network-tracking
- networking
- Networking Basics
- new
- NFS
- NFS Azure
- NFSPermissions
- NSG
- nva
- NVIDIA
- nxdomain
- nxdomainredirect
- oidc
- Open AI
- open source
- openai
- OpenAI Assistant
- Operating System
- OperatingSystem
- Operational Excellence
- operations
- P1 vs P2
- PaaS
- PaaS networking
- Packer
- passkey
- path prepending
- Performance Efficiency
- PIM
- pipelines
- Playbook
- Pluralsight
- postgresql
- Power Apps
- power automate
- Power Automate Flow
- power bi
- Power BI Embedded
- power-platform
- powershell
- presentations
- Press Releases
- Prevent Resource Deletion
- Pricing & Offerings
- Privacy
- private dns
- Private Endpoint
- Private Endpoint Configuration
- private link
- Private Link Service Tutorial
- private networking
- Private Subnets
- privatelink
- privatelinkrealitybites
- Privileged Identity Management
- Process Improvement
- Productivity
- Prompt Engineering
- Prompty
- Prototyping
- Provisioned V1 vs V2
- Provisioned V2 Azure
- Public vs Private IP
- pullrequest
- python
- Quick Post
- ransomware
- ransomware-as-a-service
- Raspberry Pi
- RBAC
- Recent News
- recording
- Regions & Datacenters
- Reliability
- Remote Rendering
- Resiliency
- resolution
- Resource Locking
- responsible-ai
- Retirements
- reverse proxy
- route table
- router
- routeserver
- routing
- s2s vpn
- SAML
- SCDPM
- SCOM
- SCVMM
- SDK and Tools
- SdkAndTools
- SDKs
- Secure Azure Connections
- Secure File Sharing
- Secure Internet Access
- Secure Remote Access
- Secure SMB Access
- Secure Web Gateway
- security
- Security strategies
- Semantic Kernel
- Sentinel
- serverless
- service endpoint policy
- Service Management
- Services
- setup
- Share Access Signature
- SIEM
- site-to-site
- Sleet
- SMB Configuration
- SMB over QUIC
- SMS
- SOAR
- Software-Defined Networking
- speaking
- Speech
- Speech to Text
- spoke
- SQL Interview
- SQL Server
- SQL Server on Azure Virtual Machines
- Star Blizzard (SEABORGIUM)
- storage
- Storage Access
- Storage Accounts
- Storage Metrics
- Storage Replicas
- storage setup
- Storm
- subnet
- Subnet Mask
- Subnetting
- Survey
- Sysadmin
- SysCtr
- Syslog
- System Center
- System Center 2025
- teams
- tech tip
- Technology
- TechTips
- Terraform
- Terraform Tests
- testing
- Text Analytics
- Thomas Maurer
- Threat Detection
- TLS 1.3 Encryption
- Token theft
- totp
- trace
- Training
- Transaction Optimzed
- troubleshooting
- tutorial
- udr
- UEBA
- Uncategorized
- updated
- User and Entity Behavior Analytics
- user-defined route
- User-Defined Routing
- VDI
- VDI Solutions
- Video
- Virtual desktop infrastructure
- virtual machine
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network appliance
- Virtual Network Gateway
- virtual network service endpoint
- Virtual Network Subnet
- Virtual WAN
- Virtualization
- Visual Studio
- Visual Studio Code
- VNet
- VNet Flow Logging
- VNet Peering
- vpn
- VPN Alternative
- VPN Gateway
- vpn site-to-site
- vwan
- walk through
- walkthrough
- Web
- web application firewall
- Web Content Filtering
- Web Filtering Policy
- Well-Architected Framework
- Windows
- Windows 11
- Windows 365
- Windows Admin Center
- Windows Console
- windows containers
- Windows Firewall
- Windows Security
- Windows Server
- Windows Server 2022
- Windows Server 2025
- Windows Server Azure Edition
- Windows Server Comparison
- Windows Server Datacenter
- Windows Server Deployment
- Windows Server Features
- Windows Server Hotpatching
- Windows Server Licensing
- Windows Server Management
- Windows Server Service Channels
- Windows Server Standard
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- Windows Virtual Desktop
- Windows Virtual Machines
- Workbooks
- XDR
- yaml
- Year In Review
- Zero Trust
- Zero Trust Networking
- All
- Adrian Hills
- Aidan Finn
- Alan Kinane
- Andy Roberts
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Azure Tar
- Carlos Mendible
- Charbel Nemnom
- Cloud Native Weekly
- Dan Rios
- Darren Robinson
- David O'Brien
- Dieter Gobeyn
- Freek Berson
- George Ollis
- Greg Low
- Gregor Suttie
- Jake Walsh
- Jaliya Udagedara
- Jamie Maguire
- Joe Carlyle
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Matt Felton
- Nicholas Chang
- Nicola Delfino
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rory Braybrook
- Sam Cogan
- Sarah Lean
- Scott Hanselman
- Simon Waight
- Sucheta Gawade
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Wesley Haakman
- Will Velida