Workplace Ninja Summit 2024

Join Sami Laiho, Chief Research Officer of Adminize, for a look back in to what 2023 changed in the Security Threat Landscape and to hear his predictions on what will the future have in store for us.

In this session, we delve into the evolving threats within the SaaS application ecosystem, examining recent trends and the innovative techniques employed by adversaries. We will explore the challenges faced by defenders in securing the SaaS surface against emerging attack techniques. We will discuss the importance of Microsoft Defender for Cloud Apps as part of Microsoft Defender XDR in scoping and containing sophisticated attacks. Additionally, we will address the critical role of SaaS Security Posture Management (SSPM) in early identification of risky configurations and the necessity for a research-led approach to SSPM enhancements. Join us as we share insights on recent product advancement to stay ahead of the adversary pace.

Environments with multiple Global Administrators, Intune Administrators and Security Administrators are a nightmare for every Microsoft Security Consultant.
Therefore it is important to implement least privilege, protect critical access and apply just in time access.

During this session we will in take a deep dive into the world of Intune Scope Tags, Entra Administrative Units, Defender Device groups and how to leverage access to those objects using Privileged Identity Management.

We provide you valuable insights from our experience deploying these solutions with large enterprise customers.

We've spent the last few years modernizing clients, kicking them out of Active Directory and optimizing them to run outside the corporate network. The use of modern protocols, conditional access and the integration of MDE and Intune now enables us to access cloud services with access management that largely complies with the principles of zero trust.

However, when it comes to accessing legacy apps in the old data center world, we unfortunately all too often fall back on the old solutions - perhaps enhanced with some SAML and certificates - and features such as microsegmentation and session revocation are sought in vain.

In this session I would like to discuss and show why Microsoft's SSE solution is so much closer to my understanding of Zero Trust Network Access by explicitly checking every session in the network during its establishment, limiting access to the least necessary and disconnecting in case of a breach.

As a security architect who used to deal intensively with networks and in recent years with identity, I am very much looking forward to a deep dive on the topic of Single SignOn when accessing the OnPrem environment with Private Access.

In addition to the way the technology works, you will learn what needs to be considered during POC and rollout and what differences there are to a classic VPN project.

Join us for a session with two experts in transitioning to cloud-native device management. Learn about their journey from managing on-premises devices to using Intune for cloud-based management. Is the transition smooth? Can it save costs? Understand why this shift is important and get valuable insights.

Discover the challenges they faced and learn best practices, tips, and tricks for a successful transition. Don't miss this chance to upgrade your device management strategy.

Think you know Passwordless Authentication? Well, think again. In this deep dive session, Join Microsoft MVP, Andy Malone as he takes you on a journey inside the next generation of Passwordless authentication using FIDO technologies. Now that FIDO keys have become virtual and can be deployed via any mobile device or desktop. Design to thwart hackers and ensure your digital world remains secure. With discussions, demos, tips and advice. Andy will walk you through all aspects of exactly what Passkey’s are, how they work and of course how to manage them.

Terraform is widely recognized as the dominant language for professional cloud configuration. It has become an essential tool for Azure, AWS, and Kubernetes projects, offering numerous advantages such as a readable declaration language, reliable state tracking for changes, robust auditing of all modifications through git, and automatic documentation of infrastructure.

Until now, Terraform has primarily focused on configuring cloud infrastructures and provided limited support for Entra ID. However, we are introducing a groundbreaking development: the Terraform Provider for Microsoft 365. This session provides an overview of this provider, which in it's first incarnation enables the configuration of almost all aspects of Intune. With support for Autopilot, Conditional Access, Configuration Profiles with Settings Catalog, Compliance Policies, and more, it opens up entirely new possibilities for Enterprise or MSP Tenant Management through Terraform.

Step into the ultimate workplace adventure where classic meets cutting-edge! In this dynamic session, we'll embark on a journey through time and technology, blending traditional workplace management with the innovative realms of Microsoft Zero Trust and Identity Management. From the tried-and-true methods of yesteryears to the futuristic landscapes of digital security, we'll explore how to weave together the best of both worlds. Join us to uncover strategies for building a resilient, adaptable, and secure workplace environment that stands the test of time and technology.

Have you ever wondered what it is like to be a Security Engineer at baseVISION? In this session, sponsored by baseVISION, I'll show you how the company enables me to deliver the best service to my customers. I'll also cover a technical part where I'll talk about a current customer security project I'm working on. This will give you an insight into my daily life and I’ll also share some practical tips and tricks around my work.

You've seen some of your peers, colleagues and acquaintances become Microsoft MVP and have been wondering how you can be part if this esteem group of IT Professionals.

In this session, Harjit and Christiaan, former Microsoft MVPs and now with Microsoft who work on the MVP program, will share real world experiences and insights on how to become a Microsoft MVP, the benefits, the challenges, the pros and cons, and much much more. This is a session to get under the hood on becoming a Microsoft MVP.

This session, which is part 1 of a 2 part workshop, Kenneth van Surksum will take your Microsoft Entra Conditional Access knowledge from basic to advanced. In part 1, we will go through the basics of designing and implementing Conditional Access. Kenneth will explain what Conditional Access is, how to create your own Conditional Access policies and will share his best practices based on years of experience implementing Conditional Acces at many customers. Kenneth will share his basic set of Conditional Access policies, to give you a head start for your own Conditional Access implementation.

This session, which is part 1 of a 2 part workshop, Kenneth van Surksum will take your Microsoft Entra Conditional Access knowledge from basic to advanced. In part 2, we will go through the advanced scenarios you can implement with Conditional Access allowing you to take your Conditional Access policies one step further. Kenneth will talk about integrating Conditional Access with Microsoft Defender for Cloud Apps and Microsoft Purview, but will also explain how to leverage Authentication Context, Authentication Strength, Authentication Flow, Filters and more.

Come ask Microsoft leadership all of your questions

Over the last years, Microsoft has released many design principles, best practices and security concepts for securing privileged access in a Microsoft Cloud environment. This includes also the "Enterprise Access Model" as an evolution of the previously known (Active Directory) ESAE approach.

But what are real-world experiences and examples of implementing those reference architecture? Which security controls should be applied? Who and what should be defined as "Tier0" or "Control Plane"? Which privilege escalation paths should be considered even in a tiered administration model?

In this demo-drive session, I will share my learnings and practical approach to identify, protect and monitor the high-privileged assets in Microsoft Entra. We will go through related features and monitoring capabilities but also limitations to implement a tiered administration model in a cloud environment. In addition, I will show insights of my free commmunity tool "EntraOps" which allows to automate classification and protection of privileged assets in your environment.

Security of your identities is crucial in the cloud. With Microsoft 365 we have many options and tools to make sure our identities can stay as secure as possible while at the same time we keep our users productive. Your identity is also what defines what and how you can access your resources in the cloud.

Learn how to protect both your standard users and all the privileged accounts in Entra ID.

Join in on a journey from password strategies, authentication methods, identity protection, privileged identity management, conditional access all the way over to a password-less world.

Conditional Access is the heart of Microsoft's Zero Trust implementation as its policy enforcement engine and Microsoft introduces constantly new features to cover more and more use cases and integrations. This includes granular conditions and controls for specific authentication methods, restricted sessions and authentication flows but also new capabilities to re-trigger a policy evaluation.

In this session, we will discuss the latest features and their use cases and also challenges that you may not address in your current ruleset. Starting from automation for deployment, exclusion handling and gap monitoring, up to missing strong policy design to prevent rogue devices or protect privileged users.