This month, I'm happy to announce that we've updated the Entra passwordless guide to include instructions on how to use the new Phishing-Resistant Passwordless Workbook we just released! https://aka.ms/PasswordlessWorkbook

We also recently recorded an episode of the 425 Show to talk about our new deployment guidance, so check it out to get the latest and greatest info: https://www.youtube.com/watch?v=5J03ibPL09M&list=PLmAptfqzxVEXbKOJQWYCIrSzNbJ3z9uE-&index=2

In case you missed it, back in October we published a brand new guide for deploying phishing-resistant passwordless in your organization with Entra ID: https://aka.ms/PasswordlessGuide ! This is the outcome of a ton of effort across Microsoft, please use it to begin your journey!

If you missed @macadminsconf you missed some great sessions and a chance to hang out with your fellow #macadmins. The session @_michaelepping did on Platform SSO and #microsoft #EntraID slides can be found https://github.com/MarkMorow/presentations/blob/main/PSSO%20Best%20Practices%20-%20Michael%20Epping%20and%20Mark%20Morowczynski%20-%20Mac%20Admins%20PSU%202024.pdf. We will share the recording when it's available.

@markmorow @bynkii @talkingmoose it was great to be there with everyone, glad you liked the session!

Attention #macadmins, Platform SSO for #EntraID is now in public preview! You can read all about it in the blog post (https://techcommunity.microsoft.com/t5/microsoft-entra-blog/platform-sso-for-macos-now-in-public-preview/ba-p/4051574) and in the docs(https://learn.microsoft.com/en-us/mem/intune/configuration/platform-sso-macos). Make sure you are taking this opportunity to move these users to a phishing resistant credential natively using Secure Enclave. @_michaelepping & I will be discussing how this all works at the @macadminsconf (https://psumac2024.sched.com/) conference in July. We’ll try to answer any questions here, the macadmins slack and the LinkedIn group (https://www.linkedin.com/groups/13007354/). #infosec #microsoft365

If you have #EntraID or #Microsoft365 and you have #Apple #macOS in your environment (hint everyone does), the session @_michaelepping, Sean Rabbit from JAMF and I did at their #JNUC conference this year is finally up on YouTube. You can find the session at https://youtu.be/D9-4miD-3pM?si=AU_pCsR-jwaQ8OZr. If you haven't paid attention to this space you really should be. Either your #macOS user experience is probably pretty poor or you have security gaps because you've been excluding them from your policies. It doesn't have to be that way. We'll cover how you can make sure you are following best practices from a security and an end user experience. #Infosec

@secminded in this case I took two of them, 2 days apart. And my girlfriend took one. So I'm feeling like we're PROBABLY in the clear. But you're right that the rate of false negatives on the rapid tests can be nerve-racking…

There's still a sweet relief to taking a covid test and going, “ahh, I'm just normal sick, not covid sick”

@spiegelmama I actually like the Focus Time feature! Its just that I get too busy and it goes out the window 😞

Checking Viva Insights is always a harrowing experience - lots of insights into how I have too many meetings and never maintain my focus time 🫣

@merill @sassdawe right, it’s a native functionally provided by Apple in their OS. They have some logic that prevents it from working for any domain as well, we can only do this for Microsoft-owned domains, Apple ensures it would fail if we try to do this for any domain Microsoft doesn’t own. The same goes for any IDP that leverages this capability, there’s a domain ownership check built into the OS basically.

@mikethefifth thank you!

No more excuses, time to deploy :)

Finally, the Microsoft Enterprise SSO Extension for macOS and iOS is Generally Available! https://learn.microsoft.com/en-us/azure/active-directory/develop/apple-sso-plugin

Taking a few days off to go skiing in Tahoe - first time there! Flying with a big ol ski bag is kind of weird

This week's Mac Admins Podcast has @_michaelepping from Microsoft joining us to talk about Single Sign-on Extensions! https://podcast.macadmins.org/2022/11/29/episode-293-michael-epping-from-microsoft-on-the-single-sign-on-extension/

@markmorow my dad is already asking me about how to make the Outlook nickname cache work the way he wants, it’s gonna be a long weekend

If you end up doing family tech support this holiday weekend, dont forget that the #Microsoft #Authenticator app can also generate strong passwords.https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/generate-strong-passwords-with-microsoft-authenticator/ba-p/3299050