Tag Data Security

Microsoft Dumps OTP Authentication for SharePoint Online Sharing with Entra ID B2B

Interian | Securing Insights

Microsoft is phasing out One-Time Passcode (OTP) authentication for SharePoint Online and OneDrive external sharing, replacing it with Entra ID B2B Collaboration, effective July 1, 2025 (MC1089315). Legacy OTP links will stop working, requiring users to re-share content to restore access for external collaborators, who must also register for mandatory MFA. Prepare now by notifying users, updating documentation, auditing shared content, and ensuring Entra ID B2B settings are configured. This shift enhances security but demands proactive planning to avoid disruptions.

New OneDrive Feature Poses Data Leak Risk for Businesses

Interian | Securing Insights

Microsoft’s new OneDrive feature, launching in May 2025, lets users sync personal accounts on work devices—a convenience that could spell trouble for businesses. This opens the door to data leaks and compliance risks. Our post dives into these security concerns and offers IT administrators practical solutions using Group Policies and Intune. Learn how to lock down personal syncing and protect your organization’s sensitive data—read on to stay ahead of the threat!

Comprehensive Guide to Setting Up Microsoft Entra Global Secure Access (GSA) with Internet Access, Licensing, and Key Differences with SSE

Microsoft Entra Global Secure Access (GSA)

Learn how to implement Microsoft Entra Global Secure Access (GSA) for secure internet access. This step-by-step guide covers everything from activating GSA for your tenant to configuring web content filtering, security profiles, and conditional access policies. Understand the key differences between GSA and Security Service Edge (SSE) and how to improve your organisation's security posture. Plus, find out about licensing updates and how to enhance Microsoft Entra ID capabilities.

Unlocking DUDE: A Guide to Dynamic User and Device Enumeration

Interian | Securing Insights

DUDE (Dynamic User and Device Enumeration) is a powerful tool for IT administrators to automate the process of retrieving and managing user and device data from Azure AD. Leveraging Microsoft Graph API and PowerShell, DUDE streamlines security monitoring, compliance reporting, and device management. This guide covers its architecture, setup, common use cases, and real-world applications to enhance IT workflows. Learn how DUDE can save time and ensure up-to-date, compliant IT environments.

Mastering NIS 2 Compliance with Microsoft Purview Compliance Manager

Interian | Securing Insights

Mastering NIS 2 Compliance with Microsoft Purview Compliance Manager

Navigating the complex requirements of NIS 2 compliance is crucial for CISOs. Microsoft Purview Compliance Manager offers a powerful tool to streamline and automate compliance within Microsoft 365. This guide explores how to use the platform to assess data protection risks, implement necessary controls, and stay aligned with evolving regulations. Remember, full NIS 2 compliance requires a holistic approach beyond just Microsoft 365. Start your compliance journey now to meet the stringent requirements ahead of the NIS 2 Directive's October 2024 deadline.

Trending now

Entra Passkeys
Microsoft is auto-enabling passkeys in Entra: configuration, sync and deployment best practices
Master SharePoint Version History: Your Ultimate Guide to Limits, Storage, and Security
Securing Windows Recall: A Guide to Enterprise Management and NIS2 Alignment
How to Enhance Microsoft 365 Auditing: Beyond the Unified Audit Log