Workplace Ninja Summit 2024: Full Schedule

15:20 CEST

Kerberos is alive and kicking in the cloud

Tuesday September 17, 2024 15:20 - 16:20 CEST

Microsoft first introduced Kerberos as an authentication protocol in Windows 2000 Active Directory. Since then, many extensions to the protocol have been introduced to allow for constrained delegation, protocol translation and more. You may be surprised that Kerberos is still actively used in Microsoft Entra and solves several challenges, including SSO for hybrid users, hybrid user sign-ins using FIDO keys, Kerberos sign-in to Windows auth websites, and user authentication to cloud-hosted SMB file share.

Come to this session, and John Craddock will show you how Kerberos works and how Microsoft has implemented Kerberos in the cloud. This is packed with demos and insights that will allow you to troubleshoot your environments. Don't miss this session!

Speakers

John Craddock

Identity and security architect, XTSeminars Ltd

John has designed and implemented computing systems ranging from high-speed industrial controllers to distributed IT systems focusing on security and high availability. A key player in many IT projects for industry leaders, including Microsoft, the UK Government and multi-nationals... Read More →

Kerberos is alive and kicking in the cloud pdf

Tuesday September 17, 2024 15:20 - 16:20 CEST
Clubraum 1

Security, Identity

Session format Breakout session (60 min)
Subjects Security, Conditional Access, Zero Trust
Level Intermediate

08:00 CEST

Beyond the Thunderdome: Microsoft 365 Guest & External Access Inside & Out!

Wednesday September 18, 2024 08:00 - 09:00 CEST

Auditorium

Guest access and external sharing are such an important collaborative feature in both Microsoft Azure and Microsoft 365. But, setting incorrect permissions, or selecting the wrong settings can cause access problems or even serious data leakage. In this fascinating deep dive, join award winning international speaker, YouTuber, and Microsoft MVP Andy Malone as he discusses everything you’ll need to know to correctly implement, manage and troubleshoot external access. Also, Andy will bring you up to date with the very latest developments, including both new and incoming features. If you’re looking to learn how to manage guests, then this will be a demo packed session not to miss.

Speakers

Andy Malone

Microsoft 365 Expert, Worldwide Speaker, YouTuber, Tech Instructor, Author, Quality Training Ltd

Andy Malone MVP, MCTWinning the coveted Microsoft Speaker Idol competition in 2006 catapulted Andy into a prestigious international speaking career. Today, Andy is not only a world class conference speaker but is also a renowned security & technology expert who has delivered ground-breaking... Read More →

Beyond the thunderdome pdf

Wednesday September 18, 2024 08:00 - 09:00 CEST
Auditorium

Security, Identity

Session format Breakout session (60 min)
Subjects Identity
Level Intermediate

09:20 CEST

Troubleshooting Modern Authentication Protocols – OAuth 2.0 & OpenID Connect

Wednesday September 18, 2024 09:20 - 10:20 CEST

Clubraum 1

If you have been working with claims-aware apps, you may have experience with WS-Federation and SAML. As we move into a new era of authentication and delegation, the modern authentication protocols OpenID Connect and OAuth 2.0 are becoming predominant. Giving us seamless authentication with perhaps SSO when it all works, but what if it doesn’t, do you know how to troubleshoot?
Come to this deep-dive session with John Craddock, and he will share his extensive real-world experience. You will learn how to rapidly troubleshoot issues and identify the source of the problem whether it be an application issue or as the result of a misconfigured identity provider (IdP). You will discover how to troubleshooting with Entra ID as the IdPs. The session is packed with demos, the session will be high on the geek meter scale and shouldn’t be missed.

Speakers

John Craddock

Identity and security architect, XTSeminars Ltd

Troubleshooting OpenID Connect and OAuth2.0 pdf

Wednesday September 18, 2024 09:20 - 10:20 CEST
Clubraum 1

Security, Identity

Session format Breakout session (60 min)
Subjects Security, Identity, Zero Trust
Level Advanced

14:00 CEST

Entra Suite deep dive

Wednesday September 18, 2024 14:00 - 15:00 CEST

Clubraum 2

Learn how to securely manage your Identity and remote access across the enterprise, from private resources to Internet ones

Speakers

Peter Lenzke

Sen. Product Manager, Microsoft Corp.

Working in IT for 15+ years and for the last 12 years at Microsoft. Being a Program Manager in the identity division making Entra better every day.

Security Lenzke EntraSuite deepdive Wednesday pptx

Wednesday September 18, 2024 14:00 - 15:00 CEST
Clubraum 2

Security, Identity

Session format Breakout session (60 min)
Subjects Identity, Security, Conditional Access
Level Intermediate

10:40 CEST

Control Plane under Control: Securing Privileged Access by Microsoft Enterprise Access Model

Thursday September 19, 2024 10:40 - 11:40 CEST

Clubraum 1

Over the last years, Microsoft has released many design principles, best practices and security concepts for securing privileged access in a Microsoft Cloud environment. This includes also the "Enterprise Access Model" as an evolution of the previously known (Active Directory) ESAE approach.

But what are real-world experiences and examples of implementing those reference architecture? Which security controls should be applied? Who and what should be defined as "Tier0" or "Control Plane"? Which privilege escalation paths should be considered even in a tiered administration model?

In this demo-drive session, I will share my learnings and practical approach to identify, protect and monitor the high-privileged assets in Microsoft Entra. We will go through related features and monitoring capabilities but also limitations to implement a tiered administration model in a cloud environment. In addition, I will show insights of my free commmunity tool "EntraOps" which allows to automate classification and protection of privileged assets in your environment.

Speakers

Thomas Naunheim

Thomas Naunheim is a Cyber Security Architect from Germany and with focus on identity and security solutions in Microsoft Azure. He is working for glueckkanja AG and part of projects to design and implement Microsoft cloud identity and security solutions in enterprise environments.You... Read More →

Control Plane under Control pdf

Thursday September 19, 2024 10:40 - 11:40 CEST
Clubraum 1

Security, Identity

Session format Breakout session (60 min)
Subjects Azure AD, Sentinel, Identity, MicrosoftXDR, Zero Trust
Level Advanced

12:40 CEST

Securing your Entra Identities in 2024

Thursday September 19, 2024 12:40 - 13:40 CEST

Clubraum 1

Security of your identities is crucial in the cloud. With Microsoft 365 we have many options and tools to make sure our identities can stay as secure as possible while at the same time we keep our users productive. Your identity is also what defines what and how you can access your resources in the cloud.

Learn how to protect both your standard users and all the privileged accounts in Entra ID.

Join in on a journey from password strategies, authentication methods, identity protection, privileged identity management, conditional access all the way over to a password-less world.

Speakers

Jan Ketil Skanke

MVP Security, Principal Cloud Architect, COO, CloudWay

Jan Ketil has been an Microsoft MVP since 2016 and are working as a COO and Principal Cloud Architect at CloudWay in Norway. He has been working in the industry for Microsoft Partners and Microsoft for more than 20 years. He loves to speak about anything around Endpoint Management... Read More →

Maurice Daly

Microsoft MVP, Principal Cloud Architect, CloudWay

Maurice has been working in the IT industry for the past 20 years. His focus is around the areas of Windows deployment, device management, Azure AD and secure productivity, Maurice has been an MCSE since 2008 and was awarded his first MVP award in the area of Enterprise Mobility in... Read More →

SecuringEntraIdentities2024 WPNinja pdf

Thursday September 19, 2024 12:40 - 13:40 CEST
Clubraum 1

Security, Identity

Session format Breakout session (60 min)
Subjects Identity, Security, Azure AD
Level Advanced