New Azure Active Directory integrations that strengthen your security

Axiad Cloud automates the provisioning of a wide range of multifactor authentication credentials with Azure AD, including CBA with public key infrastructure (PKI), without requiring any on-premises dependencies. This makes it easier for Microsoft users to move to the cloud from on-prem solutions. To learn more about Axiad’s support of Azure Active Directory, visit the https://azuremarketplace.microsoft.com/en-us/marketplace/apps/aad.axiadcloud?ocid=GTMRewards_WhatsNewBlog_platformsupport_Vol105&tab=Overview or our https://www.brighttalk.com/webcast/18706/560962?utm_source=Microsoft&utm_medium=twitter&utm_campaign=webinar8.

https://blog.hidglobal.com/2022/04/microsoft-and-hid-improve-certificate-based-authentication enable the tens of millions of identities already leveraging x.509 (PKI) digital certificates to natively authenticate to Azure AD and any applications protected by it. This integration makes certificate-based authentication easier to deploy while simplifying remote management of credential lifecycles.

Based on configuration as code, https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.simeoncloud.com%2F&data=05%7C01%7Cnateep%40microsoft.com%7Cfea1e3f0e01b4d32b82408daa2587c30%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638000798633559238%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=R9RBAOjjSnlSdKySuH8VNmXtCfAXC9nZhQ%2F1XgpEwYI%3D&reserved=0 allows administrators to enforce multifactor authentication (MFA) with Conditional Access policies in all tenants easily. Simeon’s software allows administrators to deploy policies centrally, monitor changes, and view policy compliance holistically across all the tenants.

With the new Azure AD cloud-native CBA support, Microsoft customers can use https://cpl.thalesgroup.com/access-management/authenticators/pki-usb-authentication, https://cpl.thalesgroup.com/access-management/authenticators/pki-smart-cards, and https://cpl.thalesgroup.com/access-management/authenticators/fido-devices provided by https://www.microsoft.com/security/business/intelligent-security-association member https://cpl.thalesgroup.com/. By supporting multiple-use cases in one single device, Thales allows organizations to extend high assurance access to the cloud while building on their existing environments.

With General Availability of Azure AD CBA, Azure AD customers can bring their public key infrastructure (PKI) to Azure AD and allow users with smart card certificates secured with https://www.yubico.com/ to sign into Azure AD-protected Windows workstations and applications. Additionally, Microsoft’s new Conditional Access Authentication Strength capability will enable organizations to deploy policies that require users to use phishing-resistant authentication, and they can do so with a YubiKey.

By utilizing Microsoft Graph APIs and Azure AD audit logs, https://www.valencesecurity.com/ helps customers enforce the Zero Trust principle of least-privilege by correlating multiple data sources to provide one viewpoint into the enterprise applications, service principals, OAuth tokens, and APIs that have access to Microsoft’s SaaS services. Valence is now https://azuremarketplace.microsoft.com/marketplace/apps/aad.valence?tab=overview in the Azure AD app gallery, along with a https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/valence-tutorial for integrating it with your Azure AD tenant. Learn more about this integration on their https://www.valencesecurity.com/resources/valence-integrates-with-azure-ad.

Oort’s Identity Threat Detection and Response (ITDR) platform now supports integration with Azure AD Identity Protection to consume a user’s risk information and events, helping to provide broader context of your identity and access management (IAM) program. By bringing risk-level changes into the Oort’s platform, organizations can correlate identity risk across other IAM, human resource information system (HRIS), and SaaS signals to kick off remediation workflows to help respond to a potential identity threat. For more information visit https://oort.io/integrations/.

https://www.redvector.ai/platforms/fulcrum.html assesses the trust level of individuals based on a broad set of contextual, human behavioral, and information technology activities. In support of a Zero Trust strategy, Fulcrum now supports integration with Azure AD Identity Protection to enhance its user risk evaluation, thus allowing Fulcrum to develop a more robust and accurate trust level for the individual.

Tanium now integrates with Azure AD Identity Protection to help IT and security teams make enhanced conditional access decisions based on an extensive, highly flexible set of real-time device data from Tanium. Customers can deny access to non-compliant or high-risk devices and take advantage of Tanium's extensive remediation capabilities to quickly address a device's compliance or other security gaps. To learn more visit https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.tanium.com%2Fpartners%2Fmicrosoft&data=05%7C01%7CMatt.Soseman%40microsoft.com%7Cbb95e89d358e48eea7b108da9c206b46%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637993960686452539%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=BZGIHL7scLshjmTX77piN%2FEmnJD%2FISO449tN3Xyt28s%3D&reserved=0.

Azure AD B2C developers can now work with our custom policies experience to develop sophisticated authentication experiences in a GUI experience by leveraging https://www.gritiam.com/iefeditor. The IEF editor is a flowchart-based visual editor designed to allow developers to compose authentication user journeys. The solution allows authentication elements to be drag-and-dropped while also being customized within the editor experience.