Monitor your ADFS sign-in activity using Azure AD Connect Health’s risky IP reports

%3CLINGO-SUB%20id%3D%22lingo-sub-190255%22%20slang%3D%22en-US%22%3EMonitor%20your%20ADFS%20sign-in%20activity%20using%20Azure%20AD%20Connect%20Health%E2%80%99s%20risky%20IP%20reports%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-190255%22%20slang%3D%22en-US%22%3E%3CP%3EMany%20of%20our%20customers%20use%20Active%20Directory%20Federation%20Services%20(ADFS)%20to%20sign%20into%20Office%20365%20and%20other%20cloud%20and%20on-premises%20apps%20secured%20by%20Azure%20AD.%20ADFS%20proxy%20servers%20are%20often%20deployed%20to%20enable%20users%20to%20sign%20in%20from%20outside%20the%20corporate%20network.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22%22%3EIn%20a%20previous%20blog%20post%2C%20we%20talked%20about%20the%20kinds%20of%20attacks%20that%20hit%20this%20internet-facing%20infrastructure%20and%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fcloudblogs.microsoft.com%2Fenterprisemobility%2F2018%2F05%2F02%2Fmonitor-your-adfs-sign-in-activity-using-azure-ad-connect-healths-risky-ip-reports%2FAnnouncing%2520Release%2520Notes%2520for%2520Azure%2520Active%2520Directory%2520features.docx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Eways%20to%20secure%20your%20ADFS%20infrastructure%20and%20Azure%20AD%20sign-ins%3C%2FA%3E.%20One%20of%20the%20keys%20to%20protecting%20your%20organization%20from%20these%20kinds%20of%20attacks%20is%20to%20assure%20you%20can%20monitor%20and%20audit%20what%E2%80%99s%20happening%20with%20your%20on-premises%20identity%20infrastructure.%3C%2FP%3E%0A%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22%22%3E%3CSPAN%3ETo%20help%20improve%20your%20ability%20to%20monitor%20and%20audit%20you%20identity%20infrastructure%2C%20today%20we%E2%80%99re%20releasing%20a%20public%20preview%20of%20a%20really%20useful%20improvement%20to%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconnect-health%2Factive-directory-aadconnect-health%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EAzure%20AD%20Connect%20Health%3C%2FA%3E%3CSPAN%3E%2C%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ERisky%20IP%20Reports%3C%2FSTRONG%3E%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22050218_1547_Monitoryour2.png%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F33534i2B33A54C45C3255E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22050218_1547_Monitoryour2.png%22%20alt%3D%22050218_1547_Monitoryour2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22%22%3ERead%20about%20it%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Fcloudblogs.microsoft.com%2Fenterprisemobility%2F2018%2F05%2F02%2Fmonitor-your-adfs-sign-in-activity-using-azure-ad-connect-healths-risky-ip-reports%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EEnterprise%20Mobility%20%2B%20Security%20blog%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-190255%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Community Manager

Many of our customers use Active Directory Federation Services (ADFS) to sign into Office 365 and other cloud and on-premises apps secured by Azure AD. ADFS proxy servers are often deployed to enable users to sign in from outside the corporate network.

 

In a previous blog post, we talked about the kinds of attacks that hit this internet-facing infrastructure and ways to secure your ADFS infrastructure and Azure AD sign-ins. One of the keys to protecting your organization from these kinds of attacks is to assure you can monitor and audit what’s happening with your on-premises identity infrastructure.

 

To help improve your ability to monitor and audit you identity infrastructure, today we’re releasing a public preview of a really useful improvement to Azure AD Connect HealthRisky IP Reports.

 

050218_1547_Monitoryour2.png

 

Read about it in the Enterprise Mobility + Security blog.

0 Replies