Entra ID

Governance Toolkit 365 (GT365) provides insights and automation solutions for Microsoft 365. To use these capabilities, the GT365 application must be approved by a Microsoft 365 administrator. As new solutions and features are continuously added, additional permissions may be required over time. This guide explains how administrators can grant and renew the required permissions. GT365 uses the Governance Toolkit 365 application to securely read data from your Microsoft 365 tenant and provide insights, reports, and automation capabilities. Once the application has been approved, administrators can optionally enable additional services and features through the permissions described below. ...

In Delegate365, there exist two methods to configure Multi Factor Authentication (MFA) for users: the functions “Authentication methods (MFA)”, and “MFA (Legacy)”. See the difference here, and how to disable the “MFA (Legacy)” feature. Authentication Methods (MFA): This is Microsoft’s modern MFA setting method. Delegate365 allows you to remove authentication methods for a user, so the user will have to reconfigure their MFA if they are removed. MFA (Legacy): This method is deprecated, which is why we called it “Legacy.” It requires a service account without MFA to work, and will stop working after March 2025, see Important update: Deprecation of Azure AD PowerShell and MSOnline PowerShell modules. Therefore, this feature is only present for historical reasons. If it is not needed, we recommend disabling it as below. ...

Microsoft is rolling out the new Teams v2 client. This is now a Single Page Application (SPA), which means generated deep links no longer work. Unfortunately, this also affects the GT365 solution 09 and 11, e.g. to open the settings of a team and the management of members with a button. Here you can find out why this is the case and what workarounds are possible. This means that a direct link like https://teams.microsoft.com/v2/#/teamDashboard/[team-name]/[team-.id]/td.members now always leads to https://teams.microsoft.com/v2/ and the user ends up in the chat area. This is undesirable, but unfortunately cannot be changed because Microsoft no longer supports direct links in the Teams v2 client due to the new SPA architecture. For Governance Toolkit 365 customers, see also the news entry in the GT365 admin portal. ...

Microsoft Entra ID (or Azure AD) applications are cloud-based applications that can be integrated with Azure AD for authentication and authorization purposes. Using such applications provides a way to centrally manage and secure access to your cloud-based applications and services using Azure AD identities and credentials. This article is presented in two parts, exploring the practical implementation and functionality of apps across tenant boundaries. It provides an overview of how these apps operate and the details of permissions when used in a real-world setting. ...

In December and January some features and fixes have been added to Delegate v9.7. In this update, administrators can allow or block sharing settings of SharePoint sites to comply with company policies. Global Sharing settings: In the SharePoint Admin Center, Global Administrators can control the sharing settings for their Microsoft 365 tenant (see more at Manage sharing settings for SharePoint and OneDrive in Microsoft 365). These settings apply to the entire organization in SharePoint and OneDrive. The screenshot below shows a typical setting for organizations that allow external and anonymous sharing to certain SharePoint sites, but want to restrict sharing from the OneDrive personal space. ...

2023 was the year when we finally overcame the pandemic that affected many aspects of our lives. We resumed our normal activities while also applying the lessons we learned from a challenging situation, where we had to limit our travel, social interactions, and work remotely. From a business perspective, the year was very rewarding for us. Our company, atwork, received the Innovation award 2023 from Microsoft Austria for our AI4Good project, which uses AI to assist with sign language communication in various scenarios. ...

The current version of Delegate365 v9.7 comes with some improvements. See the details here. SMTP Authentication in Users / Mailbox settings: A new switch SMTP Authentication has been added to the Mailbox settings of a User. This allows, see Enable or disable authenticated client SMTP submission (SMTP AUTH) in Exchange Online. Usually, Microsoft recommends to disable SMTP AUTH in your Exchange Online organization and to enable it only for the accounts (mailboxes) that still require it. If security defaults is enabled in your organization, SMTP AUTH is already disabled in Exchange Online. However, admins can modify this setting in the Mailbox features section. The SMTP Authentication dropdown allows to set the setting to* On, Off, *and Organization settings. which means that the settings for the user are inherited from the organization´s transportation rules settings. This setting corresponds to the setting in the Microsoft 365 Admin Center, under Users / Active Users / Select a user / Manage Email Apps / Authenticated SMTP switch or with PowerShell. In PowerShell, this setting is set with Set-TransportConfig and Set-CASMailbox with an attribute named SmtpClientAuthenticationDisabled, where the organization settings are equal to $null, On means $false, and Off means $true. This is simplified in Delegate365 to be more understandable. ...

Sometimes being a guest in Microsoft Entra tenants feel like Hotel California: “You can check-out any time you like, but you can never leave!” It is this time of the year, where people get new phones and this comes also with some necessary cleanup task if you move from one phone to another. While the technology is really awesome today – connect old phone with new phone and transfers happen magically, there are some things that need to be done manually. Things like your Bank account access, cryptocurrency wallets, wallets, digital ID’s and last but not least – your multifactor settings. ...

By working with Azure Logic Apps, data can be processed very quickly and conveniently. Sometimes small details are a challenge, like function names or correct syntax. This is especially true if you don’t work with logic apps all the time. In addition to our existing tips here in the blog, we have some other useful functions from various scenarios that will make your work with Logic Apps easier. If you are interested, we have already collected a number of tips in our blog in category Logic Apps. So, here are some more general tips for your flows. ...

The latest version of Delegate365 v9.6 brings some improvements, fixes, and additional reports with the new Premium feature. See it here. Updating License Name Mappings during Sync: The background sync now checks the hash of a Microsoft service file that contains all M365-friendly license names (SKUs) and plan names. If there is a change in a Microsoft license name, the Delegate635 sync updates it´s database to always show the latest product and plan names in the licenses. With this feature, all Microsoft product names are automatically updated, regardless of what licenses the customer tenant has. If the naming is not consistent, this is unfortunately due to the quality of the data provided by Microsoft. ...