Identity Management Archives | Peter Klapwijk - In The Cloud 24-7

Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps

Peter Klapwijk — Sat, 21 Feb 2026 08:52:00 +0000

Do you know how persistent your browser session is when a Conditional Access policy is active, in which the setting Persistent browser session is set to Never persistent? I assumed that the browser session would never be persistent, like the setting says. Maybe I just thought to simple, as I’m not an authentication expert, but the answer seems to be; it depends. It depends on the authentication architecture of the web application, and on a setting in the browser. [...]

The post Why ‘Never persistent’ isn’t really never persistent: understanding browser sessions in Microsoft 365 Web Apps appeared first on Peter Klapwijk - In The Cloud 24-7.

Create deployment ring groups for Microsoft Intune

Peter Klapwijk — Fri, 27 Jun 2025 14:21:49 +0000

If you’re working with Microsoft Intune, I assume you deploy new updates, configurations or applications gradually, with different ring groups to gradually roll these out and avoid an outage because of a change.Today, I share an approach in creating device ring groups for your ring deployments. Let’s say we want to gradually roll out Windows [...]

The post Create deployment ring groups for Microsoft Intune appeared first on Peter Klapwijk - In The Cloud 24-7.

Build your own Windows 365 request approval flow

Peter Klapwijk — Sun, 16 Mar 2025 13:28:10 +0000

Today, I share a blog post on creating an approval flow to process user requests for a Windows 365 cloud PC. Such a flow allows an end-user to request a cloud PC, after which the user’s manager needs to approve or deny the request. When the request is approved, the cloud PC is automatically provisioned. [...]

The post Build your own Windows 365 request approval flow appeared first on Peter Klapwijk - In The Cloud 24-7.

Build your own user onboarding automation: Send a notification when Windows 365 provisioning is finished

Peter Klapwijk — Tue, 25 Feb 2025 20:51:26 +0000

Today, I’m sharing another blog post that’s somewhat related to user onboarding automation. This time I’m sharing how we can automatically build an automation flow to inform our users when their Windows 365 cloud PC finished provisioning and is ready for sign-in. This prevents the user from manually checking if the cloud PC is ready, [...]

The post Build your own user onboarding automation: Send a notification when Windows 365 provisioning is finished appeared first on Peter Klapwijk - In The Cloud 24-7.

Build your own user onboarding automation – Day 1: enable the account and create a Temporary Access Pass

Peter Klapwijk — Tue, 18 Feb 2025 14:25:53 +0000

Recently I shared this blog post about creating a low-code automation solution to easily create users in Entra ID. This is the follow-up blog post in the user onboarding automation series. This second automation flow enables the user account of users that have a hire date of today. Besides that a Temporary Access Pass is created [...]

The post Build your own user onboarding automation – Day 1: enable the account and create a Temporary Access Pass appeared first on Peter Klapwijk - In The Cloud 24-7.

Build your own user onboarding automation – Entra ID user account creation

Peter Klapwijk — Thu, 13 Feb 2025 11:18:31 +0000

In one of the latest blog posts, I shared how we can create a red button automation solution to take action when a user account is compromised. Today we’re going to build our own user onboarding automation with the low-code solution Azure Logic Apps. This is the first part of a user onboarding automation series [...]

The post Build your own user onboarding automation – Entra ID user account creation appeared first on Peter Klapwijk - In The Cloud 24-7.

Azure AD Connect setup error

Peter Klapwijk — Thu, 04 Jan 2024 19:17:00 +0000

I was configuring a Microsoft 365 lab environment to write this blog post recently. As I needed some hybrid user identities, I needed to configure good old Azure AD Connect. When I entered all the needed information in the configuration wizard, I already saw that it took a very long time to set up the [...]

The post Azure AD Connect setup error appeared first on Peter Klapwijk - In The Cloud 24-7.

Passwordless sign in to Office 365 on macOS

Peter Klapwijk — Fri, 09 Jul 2021 17:01:00 +0000

I have written some articles in the past related to the passwordless sign-in subject, but that usually described to experience on Windows devices. I described how to use FIDO2 security keys to sign in to Windows itself or use the key to sign in to Office 365/ Azure AD.On macOS, we are not able to [...]

The post Passwordless sign in to Office 365 on macOS appeared first on Peter Klapwijk - In The Cloud 24-7.

Use the ATKey.Pro security key as hardware password manager

Peter Klapwijk — Tue, 24 Nov 2020 15:54:34 +0000

As written in the previous post, I received two ATKey.Pro FIDO2 security keys from vendor AuthenTrend for testing. I short mentioned, the key has two unique features compared to FIDO2 keys from other vendors; standalone enrollment and it can be used as a hardware password manager. This article describes the second feature in more detail. [...]

The post Use the ATKey.Pro security key as hardware password manager appeared first on Peter Klapwijk - In The Cloud 24-7.

Use an ATKey.Pro security key with multiple accounts

Peter Klapwijk — Mon, 23 Nov 2020 16:51:31 +0000

Recently I received two security keys from AuthenTrend, the ATKey.Pro in a USB A and USB C version. These are both FIDO2 certified keys with fingerprint, which enables passwordless authentication for Azure AD and Microsoft (Outlook) accounts. As I received two new FIDO2 keys, it`s a good moment to write a short review about the [...]

The post Use an ATKey.Pro security key with multiple accounts appeared first on Peter Klapwijk - In The Cloud 24-7.