Photo by Jon Tyson on Unsplash
Manage guest accounts in Azure Active Directory
Welcome, Guest
Efficient collaboration while maintaining security standards is often difficult, especially when it comes to the end-user experience. Business-to-business (B2B) transactions are made in the cloud, but the cloud itself is a dangerous place. Passwords should not be accepted as the only credential, and multifactor authentication (MFA) should be the standard. In this context, it is less than useful that the MFA status is – thus far – only valid within the boundaries of the tenant and that other tenants are not trusted. If two communication partners are committed to a modern work approach with zero trust, things become even more difficult: The device status cannot be transferred either.
New Possibilities with xTAS
Cross-tenant access settings (xTAS) offer an opportunity to improve this situation. The feature is designed to control collaboration fully across tenant boundaries and let organizations control inbound and outbound collaboration by defining tenant-wide and partner-specific rules (Figure 1).
Figure 1: The default settings for cross-tenant access for B2B collaboration give you free rein. If so desired, you can establish more granular
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
-
PowerShell scripts for managing Microsoft 365 components
Manage the various components of Microsoft 365 with PowerShell scripts that use modules culled from various Microsoft products. -
Identity Governance regulates access control in Azure AD
Azure Active Directory Identity Governance brings security processes to organizations with users who access resources or collaborate with partners in the cloud. -
News for Admins
News for system administrators around the world. -
App Proxy support for Remote Desktop Services
Support flexible working environments with Remote Desktop Services and Azure AD Application Proxy. -
Azure AD with Conditional Access
Trust is good, but controls are better. As more flexible working models become widespread, the boundaries of the classic perimeter are blurring and softening existing models of trust for adopting cloud software and data storage or running domain controllers or core applications in the cloud.