My own software
Sign-in rules that nobody changes quietly
Conditional Access decides at every sign-in who gets into Microsoft 365 and Azure, on which device and from where. I keep your rules as code in Git and check every change before it is deployed. If someone changes a rule in the portal, it is spotted within an hour.
Three questions almost every company asks
- A reviewed baseline, tailored to your environment and rolled out in waves
- Changes only through a pull request, with preview and approval
- Hourly drift detection with alerts and a risk rating
- A log of every change and a weekly audit report for the people responsible for your IT
- Monitored emergency access accounts, and protection against locking yourself out
I developed the software for this myself. The image shows a demo environment.
How we start
An audit of your current sign-in rules. You get a report with all findings ranked by severity, and the order in which to close them.