Identity & Access Archives | Peter Klapwijk - In The Cloud 24-7 https://inthecloud247.com/category/identity-access/ Intune, Windows, Office 365, Microsoft 365, Azure, Automation Sat, 21 Feb 2026 08:55:45 +0000 en-US hourly 1 https://inthecloud247.com/wp-content/uploads/2016/09/cropped-Cloud-1-1-32x32.png Identity & Access Archives | Peter Klapwijk - In The Cloud 24-7 https://inthecloud247.com/category/identity-access/ 32 32 Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps https://inthecloud247.com/never-persistent-browser-session-microsoft-365-explained/ https://inthecloud247.com/never-persistent-browser-session-microsoft-365-explained/#respond Sat, 21 Feb 2026 08:52:00 +0000 https://inthecloud247.com/?p=13723 Do you know how persistent your browser session is when a Conditional Access policy is active, in which the setting Persistent browser session is set to Never persistent?  I assumed that the browser session would never be persistent, like the setting says. Maybe I just thought to simple, as I’m not an authentication expert, but the answer seems to be; it depends. It depends on the authentication architecture of the web application, and on a setting in the browser. [...]

The post Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/never-persistent-browser-session-microsoft-365-explained/feed/ 0 Create deployment ring groups for Microsoft Intune https://inthecloud247.com/create-deployment-ring-groups-for-microsoft-intune/ https://inthecloud247.com/create-deployment-ring-groups-for-microsoft-intune/#respond Fri, 27 Jun 2025 14:21:49 +0000 https://inthecloud247.com/?p=13473 If you’re working with Microsoft Intune, I assume you deploy new updates, configurations or applications gradually, with different ring groups to gradually roll these out and avoid an outage because of a change.Today, I share an approach in creating device ring groups for your ring deployments. Let’s say we want to gradually roll out Windows [...]

The post Create deployment ring groups for Microsoft Intune appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/create-deployment-ring-groups-for-microsoft-intune/feed/ 0 Build your own user onboarding automation: Send a notification when Windows 365 provisioning is finished https://inthecloud247.com/build-your-own-user-onboarding-automation-send-a-notification-when-windows-365-provisioning-is-finished/ https://inthecloud247.com/build-your-own-user-onboarding-automation-send-a-notification-when-windows-365-provisioning-is-finished/#comments Tue, 25 Feb 2025 20:51:26 +0000 https://inthecloud247.com/?p=13201 Today, I’m sharing another blog post that’s somewhat related to user onboarding automation. This time I’m sharing how we can automatically build an automation flow to inform our users when their Windows 365 cloud PC finished provisioning and is ready for sign-in. This prevents the user from manually checking if the cloud PC is ready, [...]

The post Build your own user onboarding automation: Send a notification when Windows 365 provisioning is finished appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/build-your-own-user-onboarding-automation-send-a-notification-when-windows-365-provisioning-is-finished/feed/ 3 Build your own user onboarding automation – Day 1: enable the account and create a Temporary Access Pass https://inthecloud247.com/build-your-own-user-onboarding-automation-day-1-enable-the-account-and-create-a-temporary-access-pass/ https://inthecloud247.com/build-your-own-user-onboarding-automation-day-1-enable-the-account-and-create-a-temporary-access-pass/#respond Tue, 18 Feb 2025 14:25:53 +0000 https://inthecloud247.com/?p=13098 Recently I shared this blog post about creating a low-code automation solution to easily create users in Entra ID. This is the follow-up blog post in the user onboarding automation series. This second automation flow enables the user account of users that have a hire date of today. Besides that a Temporary Access Pass is created [...]

The post Build your own user onboarding automation – Day 1: enable the account and create a Temporary Access Pass appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/build-your-own-user-onboarding-automation-day-1-enable-the-account-and-create-a-temporary-access-pass/feed/ 0 Build your own user onboarding automation – Entra ID user account creation https://inthecloud247.com/build-your-own-user-onboarding-automation-entra-id-user-account-creation/ https://inthecloud247.com/build-your-own-user-onboarding-automation-entra-id-user-account-creation/#comments Thu, 13 Feb 2025 11:18:31 +0000 https://inthecloud247.com/?p=12881 In one of the latest blog posts, I shared how we can create a red button automation solution to take action when a user account is compromised. Today we’re going to build our own user onboarding automation with the low-code solution Azure Logic Apps. This is the first part of a user onboarding automation series [...]

The post Build your own user onboarding automation – Entra ID user account creation appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/build-your-own-user-onboarding-automation-entra-id-user-account-creation/feed/ 8 Revoke user access in case of an emergency with a single click – on-premises AD integration https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click-on-premises-ad-integration/ https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click-on-premises-ad-integration/#comments Fri, 06 Dec 2024 11:00:00 +0000 https://inthecloud247.com/?p=12774 Today I will show you how to revoke user access for an Active Directory user account in an automated way. This is a follow-up post to the initial blog post in which I described how to build automation to revoke user access in a single click. For example in case of employee termination or when [...]

The post Revoke user access in case of an emergency with a single click – on-premises AD integration appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click-on-premises-ad-integration/feed/ 4 Revoke user access in case of an emergency with a single click  https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click/ https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click/#comments Fri, 15 Nov 2024 12:25:00 +0000 https://inthecloud247.com/?p=12646 I’ve seen several online discussions about the steps which need to be taken in case of a ‘red button’ action, for example when a user account is compromised or employee termination.  Of course, it differs depending on the environment which actions need to be taken to block access to corporate data as soon as possible [...]

The post Revoke user access in case of an emergency with a single click  appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/revoke-user-access-in-case-of-an-emergency-with-a-single-click/feed/ 1 Configure a user-assigned Azure Managed Identity – the basics https://inthecloud247.com/configure-a-user-assigned-managed-identity-the-basics/ https://inthecloud247.com/configure-a-user-assigned-managed-identity-the-basics/#respond Sat, 21 May 2022 13:45:00 +0000 https://inthecloud247.com/?p=9569 If you have read one of my automation-related flows before, you know most of these solutions rely on querying Graph API using HTTP actions in a Logic Apps flow. When I first started using these flows, I used Azure App Registrations with a client secret for authentication (and stored these in a Key Vault). But [...]

The post Configure a user-assigned Azure Managed Identity – the basics appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/configure-a-user-assigned-managed-identity-the-basics/feed/ 0 Create an application-based Azure AD group with Logic Apps https://inthecloud247.com/create-an-application-based-azure-ad-group-with-logic-apps/ https://inthecloud247.com/create-an-application-based-azure-ad-group-with-logic-apps/#comments Mon, 09 May 2022 17:52:00 +0000 https://inthecloud247.com/?p=9418 Yes, again a blog post related to a Logic Apps flow! That’s because I needed to have an Azure AD group filled with Windows devices, based on if a certain application is installed on the device. I have the information on which device, which applications are installed available in an Azure Log Analytics workspace, as [...]

The post Create an application-based Azure AD group with Logic Apps appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/create-an-application-based-azure-ad-group-with-logic-apps/feed/ 4 Intune RBAC – Create country based device groups with Logic Apps https://inthecloud247.com/intune-rbac-create-country-based-device-groups-with-logic-apps/ https://inthecloud247.com/intune-rbac-create-country-based-device-groups-with-logic-apps/#comments Thu, 24 Mar 2022 19:32:00 +0000 https://inthecloud247.com/?p=9238 A lot of companies have business in different countries, with a local IT department that needs to manage the Intune managed devices of their specific country. In Intune, it is possible to scope permissions to a certain group of devices using scope tags. These scope tags can be assigned to devices, based on membership of [...]

The post Intune RBAC – Create country based device groups with Logic Apps appeared first on Peter Klapwijk - In The Cloud 24-7.

]]> https://inthecloud247.com/intune-rbac-create-country-based-device-groups-with-logic-apps/feed/ 3